PT-2014-1274 · Oracle+6 · Java Se Embedded+9
Publicado
2014-04-15
·
Atualizado
2024-06-15
·
CVE-2014-0429
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
JRockit versions R27.8.1 through R28.3.1
Java SE versions 5.0u61 through 8
Java SE Embedded version 7u51
Description
The issue allows a remote attacker to compromise the confidentiality and integrity of data using the 2D subcomponent. This can be achieved through unknown vectors related to the 2D subcomponent, potentially affecting the availability of the system.
Recommendations
For JRockit versions R27.8.1 through R28.3.1, consider disabling the 2D subcomponent as a temporary workaround until a patch is available.
For Java SE versions 5.0u61 through 8, restrict access to the 2D subcomponent to minimize the risk of exploitation.
For Java SE Embedded version 7u51, avoid using the 2D subcomponent in sensitive operations until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Hp-Ux
Ibm Aix
Jrockit
Java Platform
Java Se
Java Se Embedded
Red Hat
Suse
Ubuntu