CVE-2016-3443

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u113, 7u99, and 8u77

Description The issue affects confidentiality, integrity, and availability via vectors related to 2D. It is reported that this issue may allow remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read. The vulnerability is related to errors in the code and can be exploited by a remote attacker to influence the integrity, availability, and confidentiality of information.

Recommendations For Oracle Java SE version 6u113, update to a version that includes the fix for this issue. For Oracle Java SE version 7u99, update to a version that includes the fix for this issue. For Oracle Java SE version 8u77, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the 2D component until a patch is available.