PT-2016-1802 · Oracle+3 · Java Se+4
Bo13Oy
·
Publicado
2016-04-21
·
Atualizado
2022-05-13
·
CVE-2016-3443
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 6u113, 7u99, and 8u77
Description
The issue affects confidentiality, integrity, and availability via vectors related to 2D. It is reported that this issue may allow remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read. The vulnerability is related to errors in the code and can be exploited by a remote attacker to influence the integrity, availability, and confidentiality of information.
Recommendations
For Oracle Java SE version 6u113, update to a version that includes the fix for this issue.
For Oracle Java SE version 7u99, update to a version that includes the fix for this issue.
For Oracle Java SE version 8u77, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the 2D component until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Aix
Java Platform
Java Se
Red Hat
Suse