CVE-2014-0417

Severity

93%

Complexity

86%

Confidentiality

165%

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

Oracle

First reported 11 years ago

2014-01-15 16:08:00

Last updated 7 years ago

2018-01-05 02:29:00

Affected Software

Oracle JDK 1.5.0 Update 55

1.5.0

Oracle JRE 1.5.0 Update 55

1.5.0

Oracle JavaFX 2.2.45

2.2.45

Oracle JDK 1.7.0 Update 45

1.7.0

Oracle JRE 1.7.0 Update 45

1.7.0

Oracle JDK 1.6.0 Update 65

1.6.0

Oracle JRE 1.6.0 Update 65

1.6.0

References

SUSE-SU-2014:0246

SUSE-SU-2014:0266

SUSE-SU-2014:0451

SSRT101454

SSRT101455

102001

RHSA-2014:0030

RHSA-2014:0134

RHSA-2014:0135

RHSA-2014:0136

56484

56485

56486

56535

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Vendor Advisory

64758

64932

1029608

RHSA-2014:0414

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.