Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-3544

Опубликовано: 18 окт. 2011
Источник: redhat
CVSS2: 6.8

Описание

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4java-1.4.2-ibmNot affected
Red Hat Enterprise Linux 4java-1.5.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.4.2-ibmNot affected
Red Hat Enterprise Linux 5java-1.5.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.7.0-ibmAffected
Red Hat Enterprise Linux 6java-1.4.2-ibm-sapNot affected
Red Hat Enterprise Linux 6java-1.5.0-ibmNot affected
Extras for RHEL 4java-1.6.0-sunFixedRHSA-2011:138419.10.2011
Extras for RHEL 4java-1.6.0-ibmFixedRHSA-2012:003418.01.2012
Red Hat Enterprise Linux 5java-1.6.0-openjdkFixedRHSA-2011:138018.10.2011

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=745399OpenJDK: missing SecurityManager checks in scripting engine (Scripting, 7046823)

6.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

CVSS3: 9.8
nvd
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

CVSS3: 9.8
debian
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment component in ...

CVSS3: 9.8
github
около 3 лет назад

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

CVSS3: 10
fstec
больше 13 лет назад

Уязвимость компонента Scripting программной платформы Java Runtime Environment и средства разработки приложений Java Development Kit, позволяющая нарушителю оказать влияние на целостность, доступность и конфиденциальность защищаемой информации

6.8 Medium

CVSS2