CVE-2015-5234: Input Validation
Andrea Palazzo reported the following problem affecting IcedTea-Web:
""" Permanent Trusted Applet Injection
Due to a lack of validation in the process of parsing non-standard uri schemes, it is possible to inject arbitrary trusted applets into the .appletTrustSettings configuration file.
An attacker could exploit this flaw to permanently authorize the execution of unsigned applets in the context of a victim browser from arbitrary domains. It should be noted that the exploit is triggered even if the victim hits the "cancel" button when the authorization view is prompted. """
Acknowledgement:
Name: Andrea Palazzo (Truel IT)
Other sources
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5234?
CVE-2015-5234 has a medium severity rating due to its potential for trusted applet injections.
How do I fix CVE-2015-5234?
To address CVE-2015-5234, upgrade to IcedTea-Web version 1.5.3 or later, or 1.6.1 specifically.
Which affected software is vulnerable to CVE-2015-5234?
CVE-2015-5234 affects specific versions of IcedTea-Web, Red Hat Enterprise Linux 6.0, and openSUSE versions 13.1 and 13.2.
Can CVE-2015-5234 lead to additional vulnerabilities?
Yes, exploiting CVE-2015-5234 could allow attackers to execute arbitrary code through trusted applets.
When was CVE-2015-5234 reported?
CVE-2015-5234 was reported by Andrea Palazzo.