Search/CVE-2013-1927
● CVE

CVE-2013-1927

Vendorcanonical, opensuse, redhatProductubuntu linux, opensuse, icedtea-webDiscoveredApr 29, 2013UpdatedApr 29, 2026

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."

View graph Watch Export
CVSS v3.1
—
EPSS
4.32%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
3 relationships
Timeline
disclosure → media coverage
Apr 29, 2013
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026