PT-2014-1261
CVE-2014-0446
·
Publicado
2014-04-15
·
Atualizado
2024-06-15
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8
Java SE Embedded version 7u51
Description
The issue affects confidentiality, integrity, and availability via unknown vectors related to Libraries. It allows remote attackers to exploit the vulnerability in the Java Development Kit, specifically in the Libraries subcomponent, potentially disrupting data confidentiality, integrity, and availability.
Recommendations
For Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8, update to a version that is not affected by this issue.
For Java SE Embedded version 7u51, update to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to the Libraries subcomponent until a patch is available.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾