Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-3443

Опубликовано: 19 апр. 2016
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=1328618JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

EPSS

Процентиль: 87%
0.03399
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 9.6
ubuntu
почти 10 лет назад

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

CVSS3: 9.6
nvd
почти 10 лет назад

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

CVSS3: 9.6
debian
почти 10 лет назад

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allo ...

CVSS3: 9.6
github
больше 3 лет назад

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

fstec
почти 10 лет назад

Уязвимость программной платформы Java Platform, позволяющая нарушителю повлиять на целостность, доступность и конфиденциальность информации

EPSS

Процентиль: 87%
0.03399
Низкий

6.8 Medium

CVSS2