PT-2019-11656
CVE-2019-10245
·
Publicado
2019-04-19
·
Atualizado
2021-10-28
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Eclipse OpenJ9 versions prior to 0.14.0
Oracle Java SE (affected versions not specified)
Description:
The issue involves incorrect handling in the Java bytecode verifier, allowing a method to execute past the end of the bytecode array, which can cause crashes. Additionally, there is an unspecified vulnerability related to the Java SE 2D component that could allow an unauthenticated attacker to take control of the system.
Recommendations:
For Eclipse OpenJ9 versions prior to 0.14.0, update to version 0.14.0 or later to resolve the issue.
For Oracle Java SE, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾