Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-3521

Опубликовано: 18 окт. 2011
Источник: redhat
CVSS2: 6.8

Описание

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4java-1.4.2-ibmNot affected
Red Hat Enterprise Linux 4java-1.5.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.4.2-ibmNot affected
Red Hat Enterprise Linux 5java-1.5.0-ibmNot affected
Red Hat Enterprise Linux 6java-1.4.2-ibm-sapNot affected
Red Hat Enterprise Linux 6java-1.5.0-ibmNot affected
Extras for RHEL 4java-1.6.0-sunFixedRHSA-2011:138419.10.2011
Extras for RHEL 4java-1.6.0-ibmFixedRHSA-2012:003418.01.2012
Red Hat Enterprise Linux 5java-1.6.0-openjdkFixedRHSA-2011:138018.10.2011
Red Hat Enterprise Linux 6java-1.6.0-openjdkFixedRHSA-2011:138018.10.2011

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=745442OpenJDK: IIOP deserialization code execution (Deserialization, 7055902)

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

nvd
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

debian
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment component in ...

github
около 3 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

oracle-oval
больше 13 лет назад

ELSA-2011-1380: java-1.6.0-openjdk security update (CRITICAL)

6.8 Medium

CVSS2