PT-2014-1643 · Oracle+4 · Oracle Java Se+5

Publicado

2014-10-14

·

Atualizado

2022-05-13

·

CVE-2014-6466

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u81, 7u67, and 8u20
Description The issue affects confidentiality, integrity, and availability, and is related to the Deployment component when running on Internet Explorer. It allows local users to exploit the vulnerability via unknown vectors.
Recommendations For Oracle Java SE version 6u81, update to a version that is not affected by this issue. For Oracle Java SE version 7u67, update to a version that is not affected by this issue. For Oracle Java SE version 8u20, update to a version that is not affected by this issue. As a temporary workaround, consider restricting the use of the Deployment component until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-00561
CVE-2014-6466
HPSBUX03218
ZDI-14-382

Produtos afetados

Hp-Ux
Ibm Aix
Internet Explorer
Java Platform
Oracle Java Se
Suse