PT-2014-1628 · Oracle+3 · Oracle Java Se Embedded+5

Publicado

2014-10-14

·

Atualizado

2024-06-15

·

CVE-2014-6513

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u81, 7u67, and 8u20 Oracle Java SE Embedded version 7u60
Description The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the AWT component. This can be exploited by a remote attacker to disrupt data confidentiality, integrity, and availability.
Recommendations For Oracle Java SE versions 6u81, 7u67, and 8u20, update to a version that is not affected by this issue. For Oracle Java SE Embedded version 7u60, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the AWT component until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-00546
CVE-2014-6513
HPSBUX03218
OPENSUSE-SU-2024:10534-1

Produtos afetados

Hp-Ux
Ibm Aix
Java Platform
Oracle Java Se
Oracle Java Se Embedded
Suse