CVE-2011-0873 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, and 5.0 Update 29 and earlier, allows remote attackers to affect confidentiality, i...

HighCVSS 10.0 EPSS 6.3%

Published: 2011-06-14 21:00
Updated: 2026-06-17 02:28
Exploit status: No public exploit known

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, and 5.0 Update 29 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Affected products

Product	Affected versions	Fixed in
sun jdk	<= 1.6.0	No fix listed
sun jdk	= 1.6.0	No fix listed
sun jdk	= 1.6.0-update_10	No fix listed
sun jdk	= 1.6.0-update_11	No fix listed
sun jdk	= 1.6.0-update_12	No fix listed
sun jdk	= 1.6.0-update_13	No fix listed
sun jdk	= 1.6.0-update_14	No fix listed
sun jdk	= 1.6.0-update_15	No fix listed
sun jdk	= 1.6.0-update_16	No fix listed
sun jdk	= 1.6.0-update_17	No fix listed
sun jdk	= 1.6.0-update_18	No fix listed
sun jdk	= 1.6.0-update_19	No fix listed
sun jdk	= 1.6.0-update_20	No fix listed
sun jdk	= 1.6.0-update_21	No fix listed
sun jdk	= 1.6.0-update_22	No fix listed
sun jdk	= 1.6.0-update_23	No fix listed
sun jdk	= 1.6.0-update_24	No fix listed
sun jdk	= 1.6.0-update_3	No fix listed
sun jdk	= 1.6.0-update_4	No fix listed
sun jdk	= 1.6.0-update_5	No fix listed
sun jdk	= 1.6.0-update_6	No fix listed
sun jdk	= 1.6.0-update_7	No fix listed
sun jdk	= 1.6.0-update1	No fix listed
sun jdk	= 1.6.0-update2	No fix listed
sun jdk	<= 1.5.0	No fix listed

Show 84 more

Product	Affected versions	Fixed in
sun jdk	= 1.5.0	No fix listed
sun jdk	= 1.5.0-update1	No fix listed
sun jdk	= 1.5.0-update10	No fix listed
sun jdk	= 1.5.0-update11	No fix listed
sun jdk	= 1.5.0-update11_b03	No fix listed
sun jdk	= 1.5.0-update12	No fix listed
sun jdk	= 1.5.0-update13	No fix listed
sun jdk	= 1.5.0-update14	No fix listed
sun jdk	= 1.5.0-update15	No fix listed
sun jdk	= 1.5.0-update16	No fix listed
sun jdk	= 1.5.0-update17	No fix listed
sun jdk	= 1.5.0-update18	No fix listed
sun jdk	= 1.5.0-update19	No fix listed
sun jdk	= 1.5.0-update2	No fix listed
sun jdk	= 1.5.0-update20	No fix listed
sun jdk	= 1.5.0-update21	No fix listed
sun jdk	= 1.5.0-update22	No fix listed
sun jdk	= 1.5.0-update23	No fix listed
sun jdk	= 1.5.0-update24	No fix listed
sun jdk	= 1.5.0-update25	No fix listed
sun jdk	= 1.5.0-update26	No fix listed
sun jdk	= 1.5.0-update27	No fix listed
sun jdk	= 1.5.0-update28	No fix listed
sun jdk	= 1.5.0-update3	No fix listed
sun jdk	= 1.5.0-update4	No fix listed
sun jdk	= 1.5.0-update5	No fix listed
sun jdk	= 1.5.0-update6	No fix listed
sun jdk	= 1.5.0-update7	No fix listed
sun jdk	= 1.5.0-update7_b03	No fix listed
sun jdk	= 1.5.0-update8	No fix listed
sun jdk	= 1.5.0-update9	No fix listed
sun jre	<= 1.6.0	No fix listed
sun jre	= 1.6.0	No fix listed
sun jre	= 1.6.0-update_1	No fix listed
sun jre	= 1.6.0-update_10	No fix listed
sun jre	= 1.6.0-update_11	No fix listed
sun jre	= 1.6.0-update_12	No fix listed
sun jre	= 1.6.0-update_13	No fix listed
sun jre	= 1.6.0-update_14	No fix listed
sun jre	= 1.6.0-update_15	No fix listed
sun jre	= 1.6.0-update_16	No fix listed
sun jre	= 1.6.0-update_17	No fix listed
sun jre	= 1.6.0-update_18	No fix listed
sun jre	= 1.6.0-update_19	No fix listed
sun jre	= 1.6.0-update_2	No fix listed
sun jre	= 1.6.0-update_20	No fix listed
sun jre	= 1.6.0-update_21	No fix listed
sun jre	= 1.6.0-update_22	No fix listed
sun jre	= 1.6.0-update_23	No fix listed
sun jre	= 1.6.0-update_24	No fix listed
sun jre	= 1.6.0-update_3	No fix listed
sun jre	= 1.6.0-update_4	No fix listed
sun jre	= 1.6.0-update_5	No fix listed
sun jre	= 1.6.0-update_6	No fix listed
sun jre	= 1.6.0-update_7	No fix listed
sun jre	<= 1.5.0	No fix listed
sun jre	= 1.5.0	No fix listed
sun jre	= 1.5.0-update1	No fix listed
sun jre	= 1.5.0-update10	No fix listed
sun jre	= 1.5.0-update11	No fix listed
sun jre	= 1.5.0-update12	No fix listed
sun jre	= 1.5.0-update13	No fix listed
sun jre	= 1.5.0-update14	No fix listed
sun jre	= 1.5.0-update15	No fix listed
sun jre	= 1.5.0-update16	No fix listed
sun jre	= 1.5.0-update17	No fix listed
sun jre	= 1.5.0-update18	No fix listed
sun jre	= 1.5.0-update19	No fix listed
sun jre	= 1.5.0-update2	No fix listed
sun jre	= 1.5.0-update20	No fix listed
sun jre	= 1.5.0-update21	No fix listed
sun jre	= 1.5.0-update22	No fix listed
sun jre	= 1.5.0-update23	No fix listed
sun jre	= 1.5.0-update24	No fix listed
sun jre	= 1.5.0-update25	No fix listed
sun jre	= 1.5.0-update26	No fix listed
sun jre	= 1.5.0-update27	No fix listed
sun jre	= 1.5.0-update3	No fix listed
sun jre	= 1.5.0-update4	No fix listed
sun jre	= 1.5.0-update5	No fix listed
sun jre	= 1.5.0-update6	No fix listed
sun jre	= 1.5.0-update7	No fix listed
sun jre	= 1.5.0-update8	No fix listed
sun jre	= 1.5.0-update9	No fix listed

References

openSUSE-SU-2011:0633 vendor-advisory
SUSE-SA:2011:030 vendor-advisory
SUSE-SU-2011:0807 vendor-advisory
SUSE-SU-2011:0863 vendor-advisory
SUSE-SA:2011:032 vendor-advisory
SSRT100591 vendor-advisory
HPSBMU02799 vendor-advisory
SSRT100867 vendor-advisory
RHSA-2013:1455 vendor-advisory
44818 third-party-advisory
44930 third-party-advisory
support.avaya.com
support.avaya.com
www.hitachi.co.jp
www.ibm.com
www.oracle.com
www.oracle.com patch vendor-advisory
RHSA-2011:0860 vendor-advisory
RHSA-2011:0938 vendor-advisory
RHSA-2011:1087 vendor-advisory
48148 vdb-entry
TA11-201A third-party-advisory us-government-resource
oval:org.mitre.oval:def:13888 signature vdb-entry
oval:org.mitre.oval:def:14153 signature vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 6.27% (percentile 93.7)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.