Oval Definition:oval:com.ubuntu.precise:def:20123423000
Revision Date:2012-08-07Version:1
Title:CVE-2012-3423 on Ubuntu 12.04 LTS (precise) - medium.
Description:The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2012-3423
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'icedtea-web' package in precise was vulnerable but has been fixed (note: '1.2-2ubuntu1.1').
  • BACK