Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-3443

Опубликовано: 21 апр. 2016
Источник: nvd
CVSS3: 9.6
CVSS2: 10
EPSS Низкий

Описание

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:jdk:1.6.0:update113:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update99:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update77:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update113:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update99:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update77:*:*:*:*:*:*

EPSS

Процентиль: 87%
0.03399
Низкий

9.6 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 9.6
ubuntu
почти 10 лет назад

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

redhat
почти 10 лет назад

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

CVSS3: 9.6
debian
почти 10 лет назад

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allo ...

CVSS3: 9.6
github
больше 3 лет назад

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

fstec
почти 10 лет назад

Уязвимость программной платформы Java Platform, позволяющая нарушителю повлиять на целостность, доступность и конфиденциальность информации

EPSS

Процентиль: 87%
0.03399
Низкий

9.6 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo