PT-2014-1240 · Oracle+2 · Javafx+4

Publicado 2014-04-15 · Atualizado 2022-05-13 · CVE-2014-2422

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u51 and 8 JavaFX version 2.2.51

Description The issue allows remote attackers to affect confidentiality, integrity, and availability. It is related to subcomponents of the Java Runtime Environment program and can be exploited by a remote attacker to impact data availability using the JavaFX subcomponent. The vulnerability can be used to disrupt confidentiality, integrity, and availability of data.

Recommendations For Oracle Java SE versions 7u51 and 8, and JavaFX version 2.2.51, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-461

Identificadores relacionados

BDU:2014-00447

BDU:2014-00448

CVE-2014-2422

HPSBUX03091

RHSA-2014:0412

RHSA-2014:0413

RHSA-2014_0412

RHSA-2014_0413

Produtos afetados

Hp-Ux

Java Platform

Java Se

Javafx

Red Hat

Referências · 206

• https://bdu.fstec.ru/vul/2015-00016 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA · Nota
• https://bdu.fstec.ru/vul/2015-00562 · Nota de Segurança
• http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwNDM5ODkyMg%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• https://bdu.fstec.ru/vul/2015-00015 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-0452 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2423 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00007 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00026 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2421 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-2397 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2422 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00583 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0460 · Nota de Segurança
• http://sourceforge.net/p/libpng/code/ci/1faa6ff32c648acfe3cf30a58d31d7aebc24968c · Nota