CVE-2014-0429
HIGH severity · CVSS 10
10CVSS HIGH
Summary
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)8%
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698Advisory
- http://marc.info/?l=bugtraq&m=140852974709252&w=2Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlAdvisory
- http://rhn.redhat.com/errata/RHSA-2014-0685.htmlAdvisory
- http://secunia.com/advisories/58415Advisory
- http://secunia.com/advisories/58974Advisory
- http://secunia.com/advisories/59058
- http://security.gentoo.org/glsa/glsa-201406-32.xmlAdvisory