PT-2015-2505 · Oracle+4 · Java Se Embedded+6

Publicado

2015-10-21

·

Atualizado

2024-06-15

·

CVE-2015-4868

CVSS v2.0

7.6

Alta

VetorAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u60 Oracle Java SE Embedded version 8u51
Description The issue is related to errors in the code of the Libraries subcomponent of the Java Platform. It allows remote attackers to affect confidentiality, integrity, and availability. Exploitation of the issue may enable a remote attacker to execute arbitrary code using specially crafted data for an API function.
Recommendations For Oracle Java SE version 8u60, update to a version that contains a fix for this issue. For Oracle Java SE Embedded version 8u51, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the Libraries subcomponent to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-11870
CESA-2015_1919
CVE-2015-4868
MGASA-2015-0412
OPENSUSE-SU-2015_1905-1
OPENSUSE-SU-2016_0270-1
OPENSUSE-SU-2024:10197-1
RHSA-2015:1919
RHSA-2015:1926
RHSA-2015_1919
RHSA-2015_1926
USN-2784-1

Produtos afetados

Centos
Java Platform
Java Se
Java Se Embedded
Red Hat
Suse
Ubuntu