PT-2014-1640 · Oracle+6 · Jrockit+9
Publicado
2014-10-14
·
Atualizado
2024-06-15
·
CVE-2014-6512
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Java SE versions 5.0u71, 6u81, 7u67, and 8u20
Java SE Embedded version 7u60
JRockit versions R27.8.3 and R28.3.3
Description
The issue allows a remote attacker to compromise data integrity using the Libraries subcomponent. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include unknown vectors related to Libraries.
Recommendations
For Java SE versions 5.0u71, 6u81, 7u67, and 8u20, update to a version that is not affected by this issue.
For Java SE Embedded version 7u60, update to a version that is not affected by this issue.
For JRockit versions R27.8.3 and R28.3.3, update to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to the Libraries subcomponent until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Hp-Ux
Ibm Aix
Jrockit
Java Platform
Java Se
Java Se Embedded
Red Hat
Suse
Ubuntu