PT-2014-1643 · Oracle+4 · Oracle Java Se+5

Published 2014-10-14 · Updated 2022-05-13 · CVE-2014-6466

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u81, 7u67, and 8u20

Description The issue affects confidentiality, integrity, and availability, and is related to the Deployment component when running on Internet Explorer. It allows local users to exploit the vulnerability via unknown vectors.

Recommendations For Oracle Java SE version 6u81, update to a version that is not affected by this issue. For Oracle Java SE version 7u67, update to a version that is not affected by this issue. For Oracle Java SE version 8u20, update to a version that is not affected by this issue. As a temporary workaround, consider restricting the use of the Deployment component until a patch is available.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-00561

CVE-2014-6466

HPSBUX03218

ZDI-14-382

Affected Products

Hp-Ux

Ibm Aix

Internet Explorer

Java Platform

Oracle Java Se

Suse

References · 69

• https://bdu.fstec.ru/vul/2015-00553 · Security Note
• https://bdu.fstec.ru/vul/2015-00548 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6504 · Security Note
• https://bdu.fstec.ru/vul/2015-00591 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531 · Security Note
• https://bdu.fstec.ru/vul/2015-00561 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457 · Security Note
• https://bdu.fstec.ru/vul/2015-00558 · Security Note
• https://bdu.fstec.ru/vul/2015-00590 · Security Note
• https://bdu.fstec.ru/vul/2015-00554 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288 · Security Note
• https://bdu.fstec.ru/vul/2015-00551 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201502-12.xml · Vendor Advisory