CVE-2010-2548

IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
redhaticedtea6
𝑥
< 1.7.4
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-6
lucid
Fixed 6b18-1.8.1-0ubuntu1
released
karmic
Fixed 6b18-1.8.1-0ubuntu1~9.10.1
released
jaunty
Fixed 6b18-1.8.1-0ubuntu1~9.04.1
released
hardy
Fixed 6b18-1.8.1-0ubuntu1~8.04.1
released
dapper
dne
Common Weakness Enumeration
References
http://blog.fuseyism.com/index.php/2010/07/28/icedtea6-174-released/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2548
https://security-tracker.debian.org/tracker/CVE-2010-2548
http://blog.fuseyism.com/index.php/2010/07/28/icedtea6-174-released/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2548
https://security-tracker.debian.org/tracker/CVE-2010-2548