CVE-2013-6493
Fixed in a distro release EPSS <1%
The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary socket file with a predictable name in /tmp.
Products: redhat icedtea-web
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icedtea-web | 1.4.2-1 |
| Debian 13 | icedtea-web | 1.4.2-1 |
| Debian 14 | icedtea-web | 1.4.2-1 |
| Red Hat Enterprise Linux 6 | icedtea-web | 0:1.5.1-1.el6 |
| Red Hat Enterprise Linux 6 | icedtea-web-debuginfo | 0:1.5.1-1.el6 |
| Red Hat Enterprise Linux 6 | icedtea-web-javadoc | 0:1.5.1-1.el6 |