PT-2019-11656
CVE-2019-10245
·
تاريخ النشر
2019-04-19
·
تاريخ التحديث
2021-10-28
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Eclipse OpenJ9 versions prior to 0.14.0
Oracle Java SE (affected versions not specified)
Description:
The issue involves incorrect handling in the Java bytecode verifier, allowing a method to execute past the end of the bytecode array, which can cause crashes. Additionally, there is an unspecified vulnerability related to the Java SE 2D component that could allow an unauthenticated attacker to take control of the system.
Recommendations:
For Eclipse OpenJ9 versions prior to 0.14.0, update to version 0.14.0 or later to resolve the issue.
For Oracle Java SE, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾