CVE-2010-4351

The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission…

published January 20, 2011

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02533 · 84.8th percentile
Published
2011-01-20T18:00Z
EPSS history
Timeline
  • 20 JAN 18:00Z
    The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission…
    cvelistv5