CVE-2013-1927

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF…

published April 29, 2013

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04323 · 91.1th percentile
Published
2013-04-29T22:00Z
EPSS history
Timeline
  • 29 APR 22:00Z
    The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF…
    cvelistv5