Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially signed" or (2) signed by multiple entities, which allows remote attackers to trick users into executing code that appears to come from a trusted source.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IcedTea 输入验证错误漏洞
Vulnerability Description
IcedTea6是一款OpenJDK的构建和集成项目。 IcedTea 1.7版本至1.7.8之前版本、1.8版本至1.8.5之前版本、1.9版本至1.9.5之前版本存在输入验证错误漏洞。远程攻击者利用该漏洞可以欺骗用户执行任意来自可信源的代码。
CVSS Information
N/A
Vulnerability Type
N/A