PT-2014-1229 · Oracle · Java Se 8+1

Published 2014-04-15 · Updated 2022-05-09 · CVE-2014-0464

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java SE 8

Description The issue allows a remote attacker to compromise data confidentiality and integrity using the Scripting component. It affects the Java Runtime Environment and Java Development Kit, allowing exploitation via unknown vectors related to Scripting.

Recommendations For Java SE 8, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the Scripting component until a patch is available.

Fix

Weakness Enumeration

CWE-461

Related Identifiers

BDU:2014-00424

BDU:2014-00425

CVE-2014-0464

Affected Products

Java Platform

Java Se 8

References · 13

• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00424 · Security Note
• http://security.gentoo.org/glsa/glsa-201502-12.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00425 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0464 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-0464 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0464 · Note
• http://secunia.com/advisories/57932 · Note
• http://securityfocus.com/bid/66913 · Note
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA · Note
• https://t.me/cvenotify/29937 · Telegram Post
• https://oracle.com/security-alerts/cpuapr2014.html · Note
• https://oracle.com/security-alerts/cpuapr2014verbose.html · Note