CVE-2013-1927
Fixed in a distro release EPSS 4%
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."
Products: redhat icedtea-web, canonical ubuntu_linux, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icedtea-web | 1.3.2-1 |
| Debian 13 | icedtea-web | 1.3.2-1 |
| Debian 14 | icedtea-web | 1.3.2-1 |
| Red Hat Enterprise Linux 6 | icedtea-web | 0:1.2.3-2.el6_4 |
| Red Hat Enterprise Linux 6 | icedtea-web-debuginfo | 0:1.2.3-2.el6_4 |
| Red Hat Enterprise Linux 6 | icedtea-web-javadoc | 0:1.2.3-2.el6_4 |