Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-5235
HistoryOct 09, 2015 - 12:00 a.m.

CVE-2015-5235

2015-10-0900:00:00
ubuntu.com
ubuntu.com
9

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.5%

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine
the origin of unsigned applets, which allows remote attackers to bypass the
approval process or trick users into approving applet execution via a
crafted web page.

Bugs

Notes

Author Note
mdeslaur extended applets security was introduced in icedtea-web 1.4
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchicedtea-web< 1.5.3-0ubuntu0.14.04.1UNKNOWN
ubuntu15.04noarchicedtea-web< 1.5.3-0ubuntu0.15.04.1UNKNOWN
ubuntu15.10noarchicedtea-web< 1.5.3-0ubuntu0.15.10.1UNKNOWN

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.5%