PT-2014-1656 · Oracle+1 · Javafx+3

Publicado 2014-07-16 · Atualizado 2022-05-13 · CVE-2014-4247

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u5

Description The issue allows a remote attacker to compromise the confidentiality, integrity, and availability of data using the JavaFX subcomponent. The estimated number of potentially affected devices and details about real-world incidents are not specified. Technical details about exploitation, such as specific API endpoints, vulnerable parameters, or function names, are not provided.

Recommendations For Oracle Java SE version 8u5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-00574

CVE-2014-4247

Produtos afetados

Java Platform

Java Se

Javafx

Suse

Referências · 15

• https://exchange.xforce.ibmcloud.com/vulnerabilities/94592 · Nota
• http://security.gentoo.org/glsa/glsa-201502-12.xml · Aviso do Fabricante
• http://securityfocus.com/archive/1/534161/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4247 · Nota
• http://oracle.com/technetwork/topics/security/cpujul2014-1972956.html#AppendixJAVA · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4247 · Nota de Segurança
• https://oracle.com/security-alerts/cpujul2014.html · Nota
• http://securityfocus.com/bid/68626 · Nota
• http://seclists.org/fulldisclosure/2014/Dec/23 · Nota
• https://oracle.com/security-alerts/cpujul2014verbose.html · Nota
• http://oracle.com/technetwork/topics/security/cpujul2014-1972956.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-00574 · Nota de Segurança
• http://vmware.com/security/advisories/VMSA-2014-0012.html · Nota
• http://securitytracker.com/id/1030577 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4247 · Nota de Segurança