PT-2014-1225 · Oracle+4 · Oracle Jdk+8

Published 2014-01-15 · Updated 2022-05-13 · CVE-2014-0375

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (affected versions not specified) Java Development Kit (affected versions not specified) Oracle JDK (affected versions not specified) Oracle JRE (affected versions not specified)

Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote attacker to compromise the confidentiality and integrity of data. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For Java Runtime Environment, update to a version that addresses the issue, if available. For Java Development Kit, update to a version that addresses the issue, if available. For Oracle JDK, update to a version that addresses the issue, if available. For Oracle JRE, update to a version that addresses the issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-461

Related Identifiers

BDU:2014-00416

BDU:2014-00417

CVE-2014-0375

HPSBUX02972

HPSBUX02973

RHSA-2014:0030

RHSA-2014:0134

RHSA-2014:0135

RHSA-2014:0414

RHSA-2014:0705

RHSA-2014:0982

RHSA-2014_0030

RHSA-2014_0134

RHSA-2014_0135

RHSA-2014_0414

RHSA-2014_0705

Affected Products

Hp-Ux

Ibm Aix

Java Development Kit

Java Platform

Java Runtime Environment

Oracle Jdk

Oracle Jre

Red Hat

Suse

References · 318

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• https://bdu.fstec.ru/vul/2015-00016 · Security Note
• https://bdu.fstec.ru/vul/2014-00485 · Security Note
• https://bdu.fstec.ru/vul/2015-00029 · Security Note
• https://bdu.fstec.ru/vul/2014-00435 · Security Note
• https://access.redhat.com/errata/RHSA-2014:0414 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00007 · Security Note
• https://bdu.fstec.ru/vul/2015-00026 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5896 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5889 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5904 · Security Note
• https://bdu.fstec.ru/vul/2014-00475 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0422 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5887 · Security Note