Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary socket file with a predictable name in /tmp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IcedTea-Web LiveConnect 信息泄露漏洞
Vulnerability Description
IcedTea-Web是美国红帽（Red Hat）公司和GNU Classpath团队共同开发的一款可运行Java Applet（使用Java语言编写的小应用程序）的免费Web浏览器插件。 IcedTea-Web 1.3.2及之前版本中的plugin/icedteanp/IcedTeaNPPlugin.cc文件的LiveConnect网关实现过程中存在信息泄露漏洞，该漏洞源于应用程序以不安全的权限创建临时文件。本地攻击者可利用该漏洞读取Java applet和浏览器之间的通信信息。
CVSS Information
N/A
Vulnerability Type
N/A