CVE-2013-1926

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which…

published April 29, 2013

CVSS
—
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01865 · 79.1th percentile
Published
2013-04-29T22:00Z
EPSS history
Timeline
  • 29 APR 22:00Z
    The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which…
    cvelistv5