VULNERABILITY INTELLIGENCE

CVE-2012-3422

CVSS score6.8 MEDIUM

EPSS probability3.12%

CISA KEVNot currently listed

Published2012-08-07

Last modified2026-06-16

Description

The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an unini... .