Security Advisory

CVE-2013-6493

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-03-03 16:00:00
Last updated 2024-08-06 17:46:22
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary socket file with a predictable name in /tmp.