tocsin

Debian/icedtea-web: unknown

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connec

Action: Upgrade icedtea-web to 1.1.4-1 or later.

Affected

introducedfixedlast affected
01.1.4-1-

Fixed versions

1.1.4-1

Sources

published · modified · JSON