Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IcedTea-Web 安全绕过漏洞
Vulnerability Description
IcedTea-Web是美国红帽(Red Hat)公司和GNU Classpath团队共同开发的一款可运行Java Applet(使用Java语言编写的小应用程序)的免费Web浏览器插件。 IcedTea-Web插件1.2.3之前的版本和1.3.2之前的1.3.x版本中存在漏洞。远程攻击者可通过特制的验证GIF和Java JAR的文件(又名GIFAR)利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A