CVE-2010-4351: Medium severity red hat icedtea vulnerability
The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4351?
CVE-2010-4351 is classified as a moderate severity vulnerability that may allow attackers to bypass security checks.
How do I fix CVE-2010-4351?
To mitigate CVE-2010-4351, upgrade to IcedTea version 1.7.7, 1.8.4, 1.9.4 or later.
What software is affected by CVE-2010-4351?
CVE-2010-4351 affects multiple versions of Red Hat IcedTea including 1.7 through 1.9.3.
What types of attacks can CVE-2010-4351 facilitate?
CVE-2010-4351 may allow context-dependent attackers to bypass security restrictions.
Is CVE-2010-4351 a known vulnerability?
Yes, CVE-2010-4351 is a recognized flaw documented in the Common Vulnerabilities and Exposures database.