PT-2014-1642 · Oracle+5 · Oracle Java Se+6

Publicado

2014-10-14

·

Atualizado

2022-05-13

·

CVE-2014-6492

CVSS v2.0

7.6

Alta

VetorAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u81, 7u67, and 8u20
Description The issue affects confidentiality, integrity, and availability via unknown vectors related to the Deployment component when running on Firefox, allowing remote attackers to exploit it.
Recommendations For Oracle Java SE version 6u81, update to a version that is not affected by this issue. For Oracle Java SE version 7u67, update to a version that is not affected by this issue. For Oracle Java SE version 8u20, update to a version that is not affected by this issue. As a temporary workaround, consider disabling the Deployment component until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-00560
CVE-2014-6492
HPSBUX03218
RHSA-2014:1657
RHSA-2014:1658
RHSA-2014:1876
RHSA-2014:1877
RHSA-2014:1880
RHSA-2014:1882
RHSA-2014_1657
RHSA-2014_1658
RHSA-2014_1877
RHSA-2014_1880
RHSA-2014_1882
RHSA-2015:0264

Produtos afetados

Firefox
Hp-Ux
Ibm Aix
Java Platform
Oracle Java Se
Red Hat
Suse