CVE-2011-3521 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start appl...
HighCVSS 10.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | = 1.7.0 | No fix listed |
| sun jdk | <= 1.6.0 | No fix listed |
| sun jdk | = 1.6.0 | No fix listed |
| sun jdk | = 1.6.0-update_10 | No fix listed |
| sun jdk | = 1.6.0-update_11 | No fix listed |
| sun jdk | = 1.6.0-update_12 | No fix listed |
| sun jdk | = 1.6.0-update_13 | No fix listed |
| sun jdk | = 1.6.0-update_14 | No fix listed |
| sun jdk | = 1.6.0-update_15 | No fix listed |
| sun jdk | = 1.6.0-update_16 | No fix listed |
| sun jdk | = 1.6.0-update_17 | No fix listed |
| sun jdk | = 1.6.0-update_18 | No fix listed |
| sun jdk | = 1.6.0-update_19 | No fix listed |
| sun jdk | = 1.6.0-update_20 | No fix listed |
| sun jdk | = 1.6.0-update_21 | No fix listed |
| sun jdk | = 1.6.0-update_22 | No fix listed |
| sun jdk | = 1.6.0-update_23 | No fix listed |
| sun jdk | = 1.6.0-update_24 | No fix listed |
| sun jdk | = 1.6.0-update_25 | No fix listed |
| sun jdk | = 1.6.0-update_26 | No fix listed |
| sun jdk | = 1.6.0-update_3 | No fix listed |
| sun jdk | = 1.6.0-update_4 | No fix listed |
| sun jdk | = 1.6.0-update_5 | No fix listed |
| sun jdk | = 1.6.0-update_6 | No fix listed |
| sun jdk | = 1.6.0-update_7 | No fix listed |
Show 92 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | = 1.6.0-update1 | No fix listed |
| sun jdk | = 1.6.0-update2 | No fix listed |
| sun jdk | <= 1.5.0 | No fix listed |
| sun jdk | = 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update11 | No fix listed |
| sun jdk | = 1.5.0-update11_b03 | No fix listed |
| sun jdk | = 1.5.0-update12 | No fix listed |
| sun jdk | = 1.5.0-update13 | No fix listed |
| sun jdk | = 1.5.0-update14 | No fix listed |
| sun jdk | = 1.5.0-update15 | No fix listed |
| sun jdk | = 1.5.0-update16 | No fix listed |
| sun jdk | = 1.5.0-update17 | No fix listed |
| sun jdk | = 1.5.0-update18 | No fix listed |
| sun jdk | = 1.5.0-update19 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update20 | No fix listed |
| sun jdk | = 1.5.0-update21 | No fix listed |
| sun jdk | = 1.5.0-update22 | No fix listed |
| sun jdk | = 1.5.0-update23 | No fix listed |
| sun jdk | = 1.5.0-update24 | No fix listed |
| sun jdk | = 1.5.0-update25 | No fix listed |
| sun jdk | = 1.5.0-update26 | No fix listed |
| sun jdk | = 1.5.0-update27 | No fix listed |
| sun jdk | = 1.5.0-update28 | No fix listed |
| sun jdk | = 1.5.0-update29 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update6 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update7_b03 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
| sun jre | = 1.7.0 | No fix listed |
| sun jre | <= 1.6.0 | No fix listed |
| sun jre | = 1.6.0 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_10 | No fix listed |
| sun jre | = 1.6.0-update_11 | No fix listed |
| sun jre | = 1.6.0-update_12 | No fix listed |
| sun jre | = 1.6.0-update_13 | No fix listed |
| sun jre | = 1.6.0-update_14 | No fix listed |
| sun jre | = 1.6.0-update_15 | No fix listed |
| sun jre | = 1.6.0-update_16 | No fix listed |
| sun jre | = 1.6.0-update_17 | No fix listed |
| sun jre | = 1.6.0-update_18 | No fix listed |
| sun jre | = 1.6.0-update_19 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun jre | = 1.6.0-update_20 | No fix listed |
| sun jre | = 1.6.0-update_21 | No fix listed |
| sun jre | = 1.6.0-update_22 | No fix listed |
| sun jre | = 1.6.0-update_23 | No fix listed |
| sun jre | = 1.6.0-update_24 | No fix listed |
| sun jre | = 1.6.0-update_25 | No fix listed |
| sun jre | = 1.6.0-update_26 | No fix listed |
| sun jre | = 1.6.0-update_3 | No fix listed |
| sun jre | = 1.6.0-update_4 | No fix listed |
| sun jre | = 1.6.0-update_5 | No fix listed |
| sun jre | = 1.6.0-update_6 | No fix listed |
| sun jre | = 1.6.0-update_7 | No fix listed |
| sun jre | <= 1.5.0 | No fix listed |
| sun jre | = 1.5.0 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
| sun jre | = 1.5.0-update12 | No fix listed |
| sun jre | = 1.5.0-update13 | No fix listed |
| sun jre | = 1.5.0-update14 | No fix listed |
| sun jre | = 1.5.0-update15 | No fix listed |
| sun jre | = 1.5.0-update16 | No fix listed |
| sun jre | = 1.5.0-update17 | No fix listed |
| sun jre | = 1.5.0-update18 | No fix listed |
| sun jre | = 1.5.0-update19 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update20 | No fix listed |
| sun jre | = 1.5.0-update21 | No fix listed |
| sun jre | = 1.5.0-update22 | No fix listed |
| sun jre | = 1.5.0-update23 | No fix listed |
| sun jre | = 1.5.0-update24 | No fix listed |
| sun jre | = 1.5.0-update25 | No fix listed |
| sun jre | = 1.5.0-update26 | No fix listed |
| sun jre | = 1.5.0-update27 | No fix listed |
| sun jre | = 1.5.0-update29 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
References
- SUSE-SU-2012:0114 vendor-advisory
- HPSBUX02730 vendor-advisory
- SSRT100805 vendor-advisory
- HPSBMU02799 vendor-advisory
- SSRT100867 vendor-advisory
- RHSA-2013:1455 vendor-advisory
- 48308 third-party-advisory
- 48692 third-party-advisory
- GLSA-201406-32 vendor-advisory
- www.ibm.com
- www.oracle.com vendor-advisory
- RHSA-2011:1384 vendor-advisory
- 50215 vdb-entry
- 1026215 vdb-entry
- USN-1263-1 vendor-advisory
- oracle-jre-deserialization-unspecified(70850) vdb-entry
- oval:org.mitre.oval:def:13662 signature vdb-entry