PT-2014-1628 · Oracle+3 · Oracle Java Se Embedded+5

Published 2014-10-14 · Updated 2024-06-15 · CVE-2014-6513

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u81, 7u67, and 8u20 Oracle Java SE Embedded version 7u60

Description The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the AWT component. This can be exploited by a remote attacker to disrupt data confidentiality, integrity, and availability.

Recommendations For Oracle Java SE versions 6u81, 7u67, and 8u20, update to a version that is not affected by this issue. For Oracle Java SE Embedded version 7u60, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the AWT component until a patch is available.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-00546

CVE-2014-6513

HPSBUX03218

OPENSUSE-SU-2024:10534-1

Affected Products

Hp-Ux

Ibm Aix

Java Platform

Oracle Java Se

Oracle Java Se Embedded

Suse

References · 378

• https://bdu.fstec.ru/vul/2015-00548 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6504 · Security Note
• https://bdu.fstec.ru/vul/2015-00591 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513 · Security Note
• http://ubuntu.com/usn/USN-2388-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458 · Security Note
• https://bdu.fstec.ru/vul/2015-00572 · Security Note
• https://bdu.fstec.ru/vul/2015-00552 · Security Note
• https://bdu.fstec.ru/vul/2015-00554 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492 · Security Note
• https://bdu.fstec.ru/vul/2015-00559 · Security Note