CVE-2011-2513
Fixed in a distro release EPSS 2%
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.
Products: redhat icedtea-web, redhat icedtea6
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icedtea-web | 1.1.2-1 |
| Debian 13 | icedtea-web | 1.1.2-1 |
| Debian 14 | icedtea-web | 1.1.2-1 |
| Red Hat Enterprise Linux 6 | icedtea-web | 0:1.0.4-2.el6_1 |
| Red Hat Enterprise Linux 6 | icedtea-web-debuginfo | 0:1.0.4-2.el6_1 |
| Red Hat Enterprise Linux 6 | icedtea-web-javadoc | 0:1.0.4-2.el6_1 |