PT-2014-1244 · Hewlett Packard+2 · Jdk+9

Publicado 2014-01-15 · Atualizado 2022-05-13 · CVE-2014-0382

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Java Development Kit versions prior to the fixed version Java Runtime Environment versions prior to the fixed version Oracle Java SE version 7u45 Oracle JavaFX version 2.2.45 hp jdk (affected versions not specified) hp jre (affected versions not specified) redhat enterprise linux desktop supplementary (affected versions not specified) redhat enterprise linux hpc node supplementary (affected versions not specified) redhat enterprise linux server supplementary (affected versions not specified) redhat enterprise linux server supplementary aus (affected versions not specified) redhat enterprise linux server supplementary eus (affected versions not specified) redhat enterprise linux workstation supplementary (affected versions not specified)

Description The issue is related to a vulnerability in the Java Development Kit and Java Runtime Environment, specifically with the JavaFX component. This vulnerability allows a remote attacker to affect data availability. The exact vectors related to JavaFX are unknown.

Recommendations For Oracle Java SE version 7u45, update to a version that contains the fix for this issue. For Oracle JavaFX version 2.2.45, update to a version that contains the fix for this issue. For hp jdk, hp jre, redhat enterprise linux desktop supplementary, redhat enterprise linux hpc node supplementary, redhat enterprise linux server supplementary, redhat enterprise linux server supplementary aus, redhat enterprise linux server supplementary eus, and redhat enterprise linux workstation supplementary, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-461

Identificadores relacionados

BDU:2014-00455

BDU:2014-00456

CVE-2014-0382

HPSBUX02972

RHSA-2014:0030

RHSA-2014_0030

Produtos afetados

Enterprise Linux

Hp-Ux

Jdk

Jre

Java Development Kit

Java Platform

Java Runtime Environment

Java Se

Javafx

Red Hat

Referências · 125

• https://bdu.fstec.ru/vul/2015-00028 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-0417 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0375 · Nota de Segurança
• http://osvdb.org/102026 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0410 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-5878 · Nota
• http://securityfocus.com/bid/64936 · Nota
• https://bdu.fstec.ru/vul/2014-00476 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00459 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00485 · Nota de Segurança
• https://oracle.com/security-alerts/cpujan2014verbose.html · Nota
• https://access.redhat.com/security/cve/CVE-2014-0373 · Nota
• https://bdu.fstec.ru/vul/2015-00029 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00433 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-5904 · Nota