CVE:CVE-2015-5234
CNNVD:CNNVD-201510-125
IcedTea-Web是美国红帽（Red Hat）公司和GNU Classpath团队共同开发的一款可运行Java Applet（使用Java语言编写的小应用程序）的免费Web浏览器插件。
IcedTea-Web 1.5.3之前版本和1.6.1之前1.6.x版本中存在安全漏洞，该漏洞源于程序没有正确过滤applet URL。远程攻击者可借助特制的Web页面利用该漏洞向.appletTrustSettings配置文件中插入applet，绕过用户批准进程，并执行该applet。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade redhat icedtea to a higher version than 1.5.2,1.6,and avoid the version (,1.5.2],1.6; Upgrade fedoraproject fedora to a higher version than 21,22,and avoid the version 21,22