CVE-2015-2638

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u95, 7u80, and 8u45 JavaFX version 2.2.80 Java SE Embedded versions 7u75 and 8u33

Description The issue is related to errors in the code of the Java Platform, allowing remote attackers to affect confidentiality, integrity, and availability. The vulnerability can be exploited by a remote attacker to compromise the security of the system. The exact vectors related to 2D are unknown.

Recommendations For Oracle Java SE versions 6u95, 7u80, and 8u45, update to a version that contains a fix for this issue. For JavaFX version 2.2.80, update to a version that contains a fix for this issue. For Java SE Embedded versions 7u75 and 8u33, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the 2D functionality until a patch is available.