Nome do pacote
icedtea-web
Data
2012-08-02
ID Alerta
MDVSA-2012:122
Versões afetadas
MES5 i586 , 2011 i586 , MES5 x86_64 , 2011 x86_64

Descrição do problema

Multiple vulnerabilities has been discovered and corrected in
icedtea-web:

An uninitialized pointer use flaw was found in IcedTea-Web web
browser plugin. A malicious web page could use this flaw make
IcedTea-Web browser plugin pass invalid pointer to a web browser.
Depending on the browser used, it may cause the browser to crash or
possibly execute arbitrary code (CVE-2012-3422).

It was discovered that the IcedTea-Web web browser plugin incorrectly
assumed that all strings provided by browser are NUL terminated,
which is not guaranteed by the NPAPI (Netscape Plugin Application
Programming Interface). When used in a browser that does not NUL
terminate NPVariant NPStrings, this could lead to buffer over-read
or over-write, resulting in possible information leak, crash, or code
execution (CVE-2012-3423).

The updated packages have been upgraded to the 1.1.6 version which
is not affected by these issues.

Pacotes atualizados

MES5 i586

 ce92b853ce47b6eb7a528a5e7ced8c8e  mes5/i586/icedtea-web-1.1.6-0.1mdvmes5.2.i586.rpm
 4201d942d7e176ffb005ffe214a6cc54  mes5/i586/icedtea-web-javadoc-1.1.6-0.1mdvmes5.2.i586.rpm 
 dbd321e17ccb40cb40db343044b7e859  mes5/SRPMS/icedtea-web-1.1.6-0.1mdvmes5.2.src.rpm

2011 i586

 b1a6bc36b0f02e00906b217b75a48e30  2011/i586/icedtea-web-1.1.6-0.1-mdv2011.0.i586.rpm
 08a1aae3dd89b239b9d8583940c6cf06  2011/i586/icedtea-web-javadoc-1.1.6-0.1-mdv2011.0.noarch.rpm 
 b687b00289491c8e6eb6ff242305d178  2011/SRPMS/icedtea-web-1.1.6-0.1.src.rpm

MES5 x86_64

 c0ea62255a3ad326d31d3ea24496a81a  mes5/x86_64/icedtea-web-1.1.6-0.1mdvmes5.2.x86_64.rpm
 1a947f44b47f31f78626ef499214de7f  mes5/x86_64/icedtea-web-javadoc-1.1.6-0.1mdvmes5.2.x86_64.rpm 
 dbd321e17ccb40cb40db343044b7e859  mes5/SRPMS/icedtea-web-1.1.6-0.1mdvmes5.2.src.rpm

2011 x86_64

 01df6b63bb74556737c17550bf4b8302  2011/x86_64/icedtea-web-1.1.6-0.1-mdv2011.0.x86_64.rpm
 0c8917df0db43222551082bcc66e1665  2011/x86_64/icedtea-web-javadoc-1.1.6-0.1-mdv2011.0.noarch.rpm 
 b687b00289491c8e6eb6ff242305d178  2011/SRPMS/icedtea-web-1.1.6-0.1.src.rpm

Referências