PT-2014-1249 · Oracle+6 · Java Se Embedded+9
Publicado
2014-04-15
·
Atualizado
2024-06-15
·
CVE-2014-0457
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 5.0u61 through 8
JRockit versions R27.8.1 through R28.3.1
Java SE Embedded version 7u51
Description
The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to libraries. It is associated with subcomponents of the Java Runtime Environment program and can be exploited by a remote attacker to disrupt data confidentiality and integrity using the Libraries subcomponent.
Recommendations
For Oracle Java SE versions 5.0u61 through 8, consider disabling the use of libraries until a patch is available.
For JRockit versions R27.8.1 through R28.3.1, restrict access to the Libraries subcomponent to minimize the risk of exploitation.
For Java SE Embedded version 7u51, avoid using the Libraries subcomponent in affected applications until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Hp-Ux
Ibm Aix
Jrockit
Java Platform
Java Se
Java Se Embedded
Red Hat
Suse
Ubuntu