Oval Definition:
oval:org.mitre.oval:def:23925
Revision Date
:
2014-05-26
Version
:
20
Title
:
ELSA-2013:0753: icedtea-web security update (Moderate)
Description
:
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."
Family
:
unix
Class
:
patch
Status
:
ACCEPTED
Reference(s)
:
CVE-2013-1926
CVE-2013-1927
ELSA-2013:0753-01
Platform(s)
:
Oracle Linux 6
Product(s)
:
icedtea-web
Definition Synopsis
Oracle Linux 6.x
AND
rpm test
icedtea-web-javadoc is earlier than 0:1.2.3-2.el6_4
OR
icedtea-web is earlier than 0:1.2.3-2.el6_4
BACK