CVE-2014-2401

Опубликовано: 16 апр. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

Ссылки

http://marc.info/?l=bugtraq&m=140852886808946&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=140852886808946&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://secunia.com/advisories/58974
Third Party Advisory
http://secunia.com/advisories/59058
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201502-12.xml
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676746
Broken Link
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
Vendor Advisory
http://www.securityfocus.com/bid/66911
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2014:0413
Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0414
Third Party Advisory
https://www.ibm.com/support/docview.wss?uid=swg21675973
Third Party Advisory
http://marc.info/?l=bugtraq&m=140852886808946&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=140852886808946&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://secunia.com/advisories/58974
Third Party Advisory
http://secunia.com/advisories/59058
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:javafx:2.2.51:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.5.0:update61:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.6.0:update71:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.8.0:-:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.5.0:update61:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.6.0:update71:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update51:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.8.0:-:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:ibm:forms_viewer:*:*:*:*:*:*:*:*

Версия от 4.0.0 (включая) до 4.0.0.3 (исключая)

cpe:2.3:a:ibm:forms_viewer:*:*:*:*:*:*:*:*

Версия от 8.0.0 (включая) до 8.0.1.1 (исключая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02267

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2014-2401

ubuntu

больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVE-2014-2401

redhat

больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVE-2014-2401

debian

больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; ...

GHSA-c277-m7f2-cgrx

github

больше 3 лет назад

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

BDU:2014-00462

fstec

больше 11 лет назад

Уязвимость программной платформы Java Runtime Environment, позволяющая удаленному злоумышленнику нарушить конфиденциальность и целостность данных

EPSS

Процентиль: 84%

0.02267

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo