CVE-2014-2401

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8 JavaFX version 2.2.51 Java SE Embedded version 7u51

Description The issue allows remote attackers to affect confidentiality via unknown vectors related to 2D. Exploitation of this issue can allow a remote attacker to compromise the confidentiality, integrity, and availability of data using the 2D subcomponent.

Recommendations For Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8, update to a version that is not affected by this issue. For JavaFX version 2.2.51, update to a version that is not affected by this issue. For Java SE Embedded version 7u51, update to a version that is not affected by this issue. As a temporary workaround, consider restricting the use of the 2D subcomponent until a patch is available.