PT-2015-1670

CVE-2015-2637

·

Published

2015-07-16

·

Updated

2026-10-14

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u95, 7u80, and 8u45 JavaFX version 2.2.80 Java SE Embedded versions 7u75 and 8u33
Description The issue is related to errors in the code of the Java Platform, allowing remote attackers to affect confidentiality via unknown vectors related to 2D. This could potentially allow a remote attacker to compromise the confidentiality of information.
Recommendations For Oracle Java SE versions 6u95, 7u80, and 8u45, update to a version that contains a fix for this issue. For JavaFX version 2.2.80, update to a version that contains a fix for this issue. For Java SE Embedded versions 7u75 and 8u33, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to 2D-related functionality until a patch is available.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
OPENSUSE-SU-2015_1288-1
OPENSUSE-SU-2015_1289-1
OPENSUSE-SU-2024:10197-1
RHSA-2015:1241
RHSA-2015_1241
RHSA-2015:1242
RHSA-2015_1242
RHSA-2015:1243
RHSA-2015_1243
RHSA-2015:1485
RHSA-2015_1485
RHSA-2015:1486
RHSA-2015_1486
RHSA-2015:1488
RHSA-2015:1544
RHSA-2015_1544
RHSA-2015:1604
SUSE-SU-2015:1319-1
SUSE-SU-2015:1320-1
SUSE-SU-2015:1329-1
SUSE-SU-2015:1331-1
SUSE-SU-2015:1345-1
SUSE-SU-2015:1375-1
SUSE-SU-2015:1509-1
Found an issue in the description? Have something to add? Feel free to write us 👾