Oval Definition:	oval:org.opensuse.security:def:20113377
Revision Date: 2022-09-02 Version: 1 Title: CVE-2011-3377 Description: The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a different sub-domain than the targeted domain. Family: unix Class: vulnerability Status: Reference(s): CVE-2011-3377 Mitre CVE-2011-3377 SUSE CVE-2011-3377 openSUSE-SU-2012:0371-1 openSUSE-SU-2012:0371-1 Platform(s): openSUSE 11.3 openSUSE 11.4 openSUSE 12.1 openSUSE 12.1 Update openSUSE 13.2 openSUSE Leap 15.0 openSUSE Leap 42.1 openSUSE Leap 42.2 openSUSE Leap 42.3 openSUSE Tumbleweed SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 12 SP5 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 Product(s): Definition Synopsis openSUSE 13.2 is installed AND Package Information icedtea-web-javadoc-1.5.1-4.1 is installed OR java-1_7_0-openjdk-plugin-1.5.1-4.1 is installed OR java-1_8_0-openjdk-plugin-1.5.1-4.1 is installed Definition Synopsis openSUSE Leap 42.1 is installed AND Package Information icedtea-web-javadoc-1.6.1-1.2 is installed AND icedtea-web-javadoc is signed with openSUSE key OR java-1_8_0-openjdk-plugin-1.6.1-1.2 is installed AND java-1_8_0-openjdk-plugin is signed with openSUSE key Definition Synopsis openSUSE Leap 42.2 is installed AND Package Information icedtea-web-javadoc-1.6.1-2.37 is installed AND icedtea-web-javadoc is signed with openSUSE key OR java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed AND java-1_8_0-openjdk-plugin is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed Definition Synopsis Release Information SUSE Linux Enterprise Workstation Extension 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed Definition Synopsis Release Information SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP3 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP3 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10 is installed Definition Synopsis Release Information SUSE Linux Enterprise Workstation Extension 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information icedtea-web-javadoc-1.6.2-4 is installed AND icedtea-web-javadoc is signed with openSUSE key OR java-1_8_0-openjdk-plugin-1.6.2-4 is installed AND java-1_8_0-openjdk-plugin is signed with openSUSE key Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information icedtea-web-1.7.1-lp150.1 is installed AND icedtea-web is signed with openSUSE key Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND icedtea-web-1.7.1-1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 is installed OR SUSE Linux Enterprise Workstation Extension 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP1 is installed OR SUSE Linux Enterprise Desktop 12 SP2 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP1 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP3 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP1 is installed OR SUSE Linux Enterprise Desktop 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Workstation Extension 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP1 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP3 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10 is installed Definition Synopsis Release Information SUSE Linux Enterprise Workstation Extension 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP1 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 12 SP3 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10 is installed Definition Synopsis openSUSE Tumbleweed is installed AND Package Information icedtea-web-javadoc-1.6.2-3.3 is installed OR java-1_7_0-openjdk-plugin-1.6.2-3.3 is installed OR java-1_8_0-openjdk-plugin-1.6.2-3.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 is installed OR SUSE Linux Enterprise Server 12 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 is installed OR SUSE Linux Enterprise Workstation Extension 12 is installed AND java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP1 is installed OR SUSE Linux Enterprise Desktop 12 SP2 is installed OR SUSE Linux Enterprise Server 12 SP1 is installed OR SUSE Linux Enterprise Server 12 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP1 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Desktop 12 SP5 is installed OR SUSE Linux Enterprise Server 12 SP3 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP3 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP5 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed OR java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed
BACK