CVE-2012-4540

11.11.2012, 13:00

Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.8 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 81%

Affected Products (NVD)

Vendor	Product	Version
opensuse	opensuse	13.1
opensuse	opensuse	13.2
redhat	icedtea-web	1.1
redhat	icedtea-web	1.1.1
redhat	icedtea-web	1.1.2
redhat	icedtea-web	1.1.3
redhat	icedtea-web	1.1.4
redhat	icedtea-web	1.1.5
redhat	icedtea-web	1.1.6
redhat	icedtea-web	1.2
redhat	icedtea-web	1.2.1
redhat	icedtea-web	1.3

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

icedtea-web

bookworm	1.8.8-2 fixed
bullseye	1.8.4-1 fixed
sid	1.8.8-3 fixed
trixie	1.8.8-3 fixed

Ubuntu Releases

Ubuntu Product

Codename

icedtea-web

hardy	dne
lucid	Fixed 1.2-2ubuntu0.10.04.3 released
natty	ignored
oneiric	Fixed 1.2-2ubuntu0.11.10.4 released
precise	Fixed 1.2-2ubuntu1.3 released
quantal	Fixed 1.3-1ubuntu1.1 released

openSUSE / SLES Releases

openSUSE Product

Release

java-1_7_0-openjdk-plugin

suse enterprise desktop 12 SP1	1.6.1-2.3.1 fixed
suse enterprise desktop 12 SP2	1.6.1-2.3.1 fixed
suse enterprise desktop 12 SP3	1.6.2-2.8.3 fixed
suse enterprise desktop 12 SP4	1.6.2-2.8.3 fixed
suse enterprise sap 12 SP1	1.6.1-2.3.1 fixed
suse enterprise sap 12 SP2	1.6.1-2.3.1 fixed
suse enterprise sap 12 SP3	1.6.2-2.8.3 fixed
suse enterprise sap 12 SP4	1.6.2-2.8.3 fixed
suse enterprise sap 12 SP5	1.6.2-2.8.3 fixed
suse enterprise server 12 SP1	1.6.1-2.3.1 fixed
suse enterprise server 12 SP2	1.6.1-2.3.1 fixed
suse enterprise server 12 SP3	1.6.2-2.8.3 fixed
suse enterprise server 12 SP4	1.6.2-2.8.3 fixed
suse enterprise server 12 SP5	1.6.2-2.8.3 fixed
suse enterprise workstation 12 SP1	1.6.1-2.3.1 fixed
suse enterprise workstation 12 SP2	1.6.1-2.3.1 fixed
suse enterprise workstation 12 SP3	1.6.2-2.8.3 fixed
suse enterprise workstation 12 SP4	1.6.2-2.8.3 fixed
suse enterprise workstation 12 SP5	1.6.2-2.8.3 fixed

java-1_8_0-openjdk-plugin

suse enterprise desktop 12 SP1	1.6.1-2.4.21 fixed
suse enterprise desktop 12 SP2	1.6.1-2.4.21 fixed
suse enterprise desktop 12 SP3	1.6.2-2.10.3 fixed
suse enterprise desktop 12 SP4	1.6.2-2.10.3 fixed
suse enterprise sap 12 SP1	1.6.1-2.4.21 fixed
suse enterprise sap 12 SP2	1.6.1-2.4.21 fixed
suse enterprise sap 12 SP3	1.6.2-2.10.3 fixed
suse enterprise sap 12 SP4	1.6.2-2.10.3 fixed
suse enterprise sap 12 SP5	1.6.2-2.10.3 fixed
suse enterprise server 12 SP1	1.6.1-2.4.21 fixed
suse enterprise server 12 SP2	1.6.1-2.4.21 fixed
suse enterprise server 12 SP3	1.6.2-2.10.3 fixed
suse enterprise server 12 SP4	1.6.2-2.10.3 fixed
suse enterprise server 12 SP5	1.6.2-2.10.3 fixed
suse enterprise workstation 12 SP1	1.6.1-2.4.21 fixed
suse enterprise workstation 12 SP2	1.6.1-2.4.21 fixed
suse enterprise workstation 12 SP3	1.6.2-2.10.3 fixed
suse enterprise workstation 12 SP4	1.6.2-2.10.3 fixed
suse enterprise workstation 12 SP5	1.6.2-2.10.3 fixed