CVE-2012-4540: Buffer Overflow
A flaw was reported in IcedTea-web plugin where certain events attached to an applet, when triggered, could lead to a heap-based buffer overflow, resulting in possible information leak, crash, or code execution.
Other sources
Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4540?
CVE-2012-4540 is classified as a high severity vulnerability due to its potential for heap-based buffer overflow, which can lead to code execution.
How do I fix CVE-2012-4540?
To fix CVE-2012-4540, upgrade IcedTea-web to versions 1.1.7, 1.2.2, 1.3.1, or 1.4.1 as recommended by the vendor.
Which versions of IcedTea-web are affected by CVE-2012-4540?
Affected versions of IcedTea-web include all versions prior to 1.1.7, 1.2.2, 1.3.1, and 1.4.1.
What type of attacks can exploit CVE-2012-4540?
CVE-2012-4540 can be exploited to trigger a heap-based buffer overflow, resulting in potential information leakage, application crashes, or arbitrary code execution.
What platforms are affected by CVE-2012-4540?
CVE-2012-4540 affects platforms running specific versions of IcedTea-web on Red Hat and openSUSE distributions.