PT-2014-1229 · Oracle · Java Se 8+1

Publicado 2014-04-15 · Atualizado 2022-05-09 · CVE-2014-0464

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java SE 8

Description The issue allows a remote attacker to compromise data confidentiality and integrity using the Scripting component. It affects the Java Runtime Environment and Java Development Kit, allowing exploitation via unknown vectors related to Scripting.

Recommendations For Java SE 8, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the Scripting component until a patch is available.

Correção

Enumeração de Fraquezas

CWE-461

Identificadores relacionados

BDU:2014-00424

BDU:2014-00425

CVE-2014-0464

Produtos afetados

Java Platform

Java Se 8

Referências · 13

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0464 · Nota
• http://secunia.com/advisories/57932 · Nota
• http://securityfocus.com/bid/66913 · Nota
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA · Nota
• https://t.me/cvenotify/29937 · Publicação no Telegram
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2014-00424 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-201502-12.xml · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2014-00425 · Nota de Segurança
• https://oracle.com/security-alerts/cpuapr2014.html · Nota
• https://oracle.com/security-alerts/cpuapr2014verbose.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0464 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2014-0464 · Nota de Segurança