PT-2014-1226 · Oracle+4 · Java Runtime Environment+6

Published 2014-01-15 · Updated 2022-05-13 · CVE-2014-0410

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (affected versions not specified) Java Development Kit (affected versions not specified)

Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote attacker to compromise the confidentiality and integrity of data.

Recommendations For Java Runtime Environment, consider disabling the Deployment component until a patch is available. For Java Development Kit, restrict access to the Deployment component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-461

Related Identifiers

BDU:2014-00418

BDU:2014-00419

CVE-2014-0410

HPSBUX02972

HPSBUX02973

RHSA-2014:0030

RHSA-2014:0134

RHSA-2014:0135

RHSA-2014:0414

RHSA-2014:0705

RHSA-2014:0982

RHSA-2014_0030

RHSA-2014_0134

RHSA-2014_0135

RHSA-2014_0414

RHSA-2014_0705

Affected Products

Hp-Ux

Ibm Aix

Java Development Kit

Java Platform

Java Runtime Environment

Red Hat

Suse

References · 318

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• https://bdu.fstec.ru/vul/2015-00016 · Security Note
• https://bdu.fstec.ru/vul/2014-00485 · Security Note
• https://bdu.fstec.ru/vul/2015-00029 · Security Note
• https://bdu.fstec.ru/vul/2014-00435 · Security Note
• https://access.redhat.com/errata/RHSA-2014:0414 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00007 · Security Note
• https://bdu.fstec.ru/vul/2015-00026 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5896 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5889 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5904 · Security Note
• https://bdu.fstec.ru/vul/2014-00475 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0422 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5887 · Security Note