Ubuntu Security Notice (C) 2013 Canonical, Inc. / NASL script (C) 2013 Tenable Network Security, Inc.
The remote Ubuntu host is missing a security-related patch.
Jiri Vanek discovered that IcedTea-Web would use the same classloader
for applets from different domains. A remote attacker could exploit
this to expose sensitive information or potentially manipulate applets
from other domains. (CVE-2013-1926)
It was discovered that IcedTea-Web did not properly verify JAR files
and was susceptible to the GIFAR attack. If a user were tricked into
opening a malicious website, a remote attacker could potentially
exploit this to execute code under certain circumstances.
Update the affected icedtea-netx package.
Risk factor :
Medium / CVSS Base Score : 6.8