Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-3521

Опубликовано: 18 окт. 2011
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4java-1.4.2-ibmNot affected
Red Hat Enterprise Linux 4java-1.5.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.4.2-ibmNot affected
Red Hat Enterprise Linux 5java-1.5.0-ibmNot affected
Red Hat Enterprise Linux 6java-1.4.2-ibm-sapNot affected
Red Hat Enterprise Linux 6java-1.5.0-ibmNot affected
Extras for RHEL 4java-1.6.0-sunFixedRHSA-2011:138419.10.2011
Extras for RHEL 4java-1.6.0-ibmFixedRHSA-2012:003418.01.2012
Red Hat Enterprise Linux 5java-1.6.0-openjdkFixedRHSA-2011:138018.10.2011
Red Hat Enterprise Linux 6java-1.6.0-openjdkFixedRHSA-2011:138018.10.2011

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=745442OpenJDK: IIOP deserialization code execution (Deserialization, 7055902)

EPSS

Процентиль: 90%
0.05857
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
почти 14 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

nvd
почти 14 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

debian
почти 14 лет назад

Unspecified vulnerability in the Java Runtime Environment component in ...

github
больше 3 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

oracle-oval
почти 14 лет назад

ELSA-2011-1380: java-1.6.0-openjdk security update (CRITICAL)

EPSS

Процентиль: 90%
0.05857
Низкий

6.8 Medium

CVSS2