PT-2015-1670 · Oracle+3 · Java Se Embedded+6
Publicado
2015-07-16
·
Atualizado
2024-06-15
·
CVE-2015-2637
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 6u95, 7u80, and 8u45
JavaFX version 2.2.80
Java SE Embedded versions 7u75 and 8u33
Description
The issue is related to errors in the code of the Java Platform, allowing remote attackers to affect confidentiality via unknown vectors related to 2D. This could potentially allow a remote attacker to compromise the confidentiality of information.
Recommendations
For Oracle Java SE versions 6u95, 7u80, and 8u45, update to a version that contains a fix for this issue.
For JavaFX version 2.2.80, update to a version that contains a fix for this issue.
For Java SE Embedded versions 7u75 and 8u33, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to 2D-related functionality until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Aix
Java Platform
Java Se
Java Se Embedded
Javafx
Red Hat
Suse