From 21a73f7f810a9ba6dd76c68781dc2c806fd427ab Mon Sep 17 00:00:00 2001 From: Jung-uk Kim Date: Mon, 13 Aug 2012 17:57:26 +0000 Subject: Belatedly add an entry for the recent IcedTea-Web updates. --- security/vuxml/vuln.xml | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) (limited to 'security/vuxml/vuln.xml') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 1c1020708f6e..c05d08090616 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -52,6 +52,55 @@ Note: Please add new entries to the beginning of this file. --> + + Several vulnerabilities found in IcedTea-Web + + + icedtea-web + 1.2.1 + + + + +

The IcedTea project team reports:

+
CVE-2012-3422: Use of uninitialized instance pointers
+
An uninitialized pointer use flaw was found in IcedTea-Web web + browser plugin. A malicious web page could use this flaw make + IcedTea-Web browser plugin pass invalid pointer to a web browser. + Depending on the browser used, it may cause the browser to crash + or possibly execute arbitrary code.
+
The get_cookie_info() and get_proxy_info() call + getFirstInTableInstance() with the instance_to_id_map hash as + a parameter. If instance_to_id_map is empty (which can happen + when plugin was recently removed), getFirstInTableInstance() + returns an uninitialized pointer.
+

+
CVE-2012-3423: Incorrect handling of non 0-terminated strings
+
It was discovered that the IcedTea-Web web browser plugin + incorrectly assumed that all strings provided by browser are NUL + terminated, which is not guaranteed by the NPAPI (Netscape Plugin + Application Programming Interface). When used in a browser that + does not NUL terminate NPVariant NPStrings, this could lead to + buffer over-read or over-write, resulting in possible information + leak, crash, or code execution.
+
Mozilla browsers currently NUL terminate strings, however recent + Chrome versions are known not to provide NUL terminated data.
+

+ + + + CVE-2012-3422 + CVE-2012-3423 + http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-July/019580.html + + + 2012-07-31 + 2012-08-13 + + + libcloud -- possible SSL MITM due to invalid regexp used to validate target server hostname -- cgit v1.2.3