PT-2015-1476 · Oracle+3 · Java Se Embedded+6
Published
2015-07-16
·
Updated
2024-06-15
·
CVE-2015-2638
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 6u95, 7u80, and 8u45
JavaFX version 2.2.80
Java SE Embedded versions 7u75 and 8u33
Description
The issue is related to errors in the code of the Java Platform, allowing remote attackers to affect confidentiality, integrity, and availability. The vulnerability can be exploited by a remote attacker to compromise the security of the system. The exact vectors related to 2D are unknown.
Recommendations
For Oracle Java SE versions 6u95, 7u80, and 8u45, update to a version that contains a fix for this issue.
For JavaFX version 2.2.80, update to a version that contains a fix for this issue.
For Java SE Embedded versions 7u75 and 8u33, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to the 2D functionality until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Aix
Java Platform
Java Se
Java Se Embedded
Javafx
Red Hat
Suse