PT-2014-1227
CVE-2014-2412
·
Published
2014-04-15
·
Updated
2024-06-15
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8
Java SE Embedded version 7u51
Description
The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the AWT component. This can be exploited by remote attackers to disrupt data confidentiality, integrity, and availability.
Recommendations
For Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8, consider disabling the AWT component as a temporary workaround until a patch is available.
For Java SE Embedded version 7u51, restrict access to the AWT component to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾