CVE-2010-4351

CVE-2010-4351 describes a security bypass vulnerability in the JNLP SecurityManager within IcedTea (IcedTea.so) versions 1.7.x, 1.8.x, and 1.9.x for Java OpenJDK, affecting Red Hat and Sun distributions. The flaw allows attackers to bypass the intended security policy by creating ClassLoader instances due to the checkPermission method failing to throw an exception in specific scenarios. With a CVSS score of 6.8 (Medium), this vulnerability has a network attack vector, medium attack complexity, and could lead to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.