PT-2014-1642 · Oracle+5 · Oracle Java Se+6

Published 2014-10-14 · Updated 2022-05-13 · CVE-2014-6492

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u81, 7u67, and 8u20

Description The issue affects confidentiality, integrity, and availability via unknown vectors related to the Deployment component when running on Firefox, allowing remote attackers to exploit it.

Recommendations For Oracle Java SE version 6u81, update to a version that is not affected by this issue. For Oracle Java SE version 7u67, update to a version that is not affected by this issue. For Oracle Java SE version 8u20, update to a version that is not affected by this issue. As a temporary workaround, consider disabling the Deployment component until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-00560

CVE-2014-6492

HPSBUX03218

RHSA-2014:1657

RHSA-2014:1658

RHSA-2014:1876

RHSA-2014:1877

RHSA-2014:1880

RHSA-2014:1882

RHSA-2014_1657

RHSA-2014_1658

RHSA-2014_1877

RHSA-2014_1880

RHSA-2014_1882

RHSA-2015:0264

Affected Products

Firefox

Hp-Ux

Ibm Aix

Java Platform

Oracle Java Se

Red Hat

Suse

References · 110

• 🔥 https://github.com/mpgn/poodle-PoC · Exploit
• https://bdu.fstec.ru/vul/2015-00548 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6504 · Security Note
• https://bdu.fstec.ru/vul/2015-00591 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531 · Security Note
• https://bdu.fstec.ru/vul/2015-00558 · Security Note
• https://bdu.fstec.ru/vul/2015-00590 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288 · Security Note
• https://bdu.fstec.ru/vul/2015-00642 · Security Note
• http://rhn.redhat.com/errata/RHSA-2014-1658.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513 · Security Note
• https://bdu.fstec.ru/vul/2015-00587 · Security Note