PT-2014-1656 · Oracle+1 · Javafx+3

Published 2014-07-16 · Updated 2022-05-13 · CVE-2014-4247

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u5

Description The issue allows a remote attacker to compromise the confidentiality, integrity, and availability of data using the JavaFX subcomponent. The estimated number of potentially affected devices and details about real-world incidents are not specified. Technical details about exploitation, such as specific API endpoints, vulnerable parameters, or function names, are not provided.

Recommendations For Oracle Java SE version 8u5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-00574

CVE-2014-4247

Affected Products

Java Platform

Java Se

Javafx

Suse

References · 15

• http://security.gentoo.org/glsa/glsa-201502-12.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4247 · Security Note
• http://oracle.com/technetwork/topics/security/cpujul2014-1972956.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00574 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-4247 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94592 · Note
• http://securityfocus.com/archive/1/534161/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4247 · Note
• http://oracle.com/technetwork/topics/security/cpujul2014-1972956.html#AppendixJAVA · Note
• https://oracle.com/security-alerts/cpujul2014.html · Note
• http://securityfocus.com/bid/68626 · Note
• http://seclists.org/fulldisclosure/2014/Dec/23 · Note
• https://oracle.com/security-alerts/cpujul2014verbose.html · Note
• http://vmware.com/security/advisories/VMSA-2014-0012.html · Note
• http://securitytracker.com/id/1030577 · Note