PT-2014-1239
CVE-2014-2421
·
Published
2014-04-15
·
Updated
2024-06-15
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8
JavaFX version 2.2.51
Java SE Embedded version 7u51
Description
The issue affects confidentiality, integrity, and availability via unknown vectors related to 2D. It is associated with subcomponents of the Java Development Kit and Java Runtime Environment, allowing remote attackers to exploit the vulnerability.
Recommendations
For Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8, update to a version that is not affected by this issue.
For JavaFX version 2.2.51, update to a version that is not affected by this issue.
For Java SE Embedded version 7u51, update to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to the 2D subcomponent until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾