CVE-2012-3422

The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which…

published August 7, 2012

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03119 · 87.7th percentile
Published
2012-08-07T21:00Z
EPSS history
Timeline
  • 07 AUG 21:00Z
    The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which…
    cvelistv5