CVE-2011-3544 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java a...
CriticalCVSS 9.8
EPSS 96.7%
CISA KEV
added 2022-03-03 · due 2022-03-24
Exploited in the wild
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | < 1.6.0 | 1.6.0 |
| oracle jdk | = 1.6.0 | No fix listed |
| oracle jdk | = 1.6.0-update1 | No fix listed |
| oracle jdk | = 1.6.0-update10 | No fix listed |
| oracle jdk | = 1.6.0-update11 | No fix listed |
| oracle jdk | = 1.6.0-update12 | No fix listed |
| oracle jdk | = 1.6.0-update13 | No fix listed |
| oracle jdk | = 1.6.0-update14 | No fix listed |
| oracle jdk | = 1.6.0-update15 | No fix listed |
| oracle jdk | = 1.6.0-update16 | No fix listed |
| oracle jdk | = 1.6.0-update17 | No fix listed |
| oracle jdk | = 1.6.0-update18 | No fix listed |
| oracle jdk | = 1.6.0-update19 | No fix listed |
| oracle jdk | = 1.6.0-update2 | No fix listed |
| oracle jdk | = 1.6.0-update20 | No fix listed |
| oracle jdk | = 1.6.0-update21 | No fix listed |
| oracle jdk | = 1.6.0-update22 | No fix listed |
| oracle jdk | = 1.6.0-update23 | No fix listed |
| oracle jdk | = 1.6.0-update24 | No fix listed |
| oracle jdk | = 1.6.0-update25 | No fix listed |
| oracle jdk | = 1.6.0-update26 | No fix listed |
| oracle jdk | = 1.7.0 | No fix listed |
| oracle jdk | = 1.7.0-update1 | No fix listed |
| oracle jdk | = 1.7.0-update10 | No fix listed |
| oracle jdk | = 1.7.0-update11 | No fix listed |
Show 73 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.7.0-update13 | No fix listed |
| oracle jdk | = 1.7.0-update15 | No fix listed |
| oracle jdk | = 1.7.0-update17 | No fix listed |
| oracle jdk | = 1.7.0-update2 | No fix listed |
| oracle jdk | = 1.7.0-update21 | No fix listed |
| oracle jdk | = 1.7.0-update25 | No fix listed |
| oracle jdk | = 1.7.0-update3 | No fix listed |
| oracle jdk | = 1.7.0-update4 | No fix listed |
| oracle jdk | = 1.7.0-update5 | No fix listed |
| oracle jdk | = 1.7.0-update6 | No fix listed |
| oracle jdk | = 1.7.0-update7 | No fix listed |
| oracle jdk | = 1.7.0-update7_b32 | No fix listed |
| oracle jdk | = 1.7.0-update9 | No fix listed |
| oracle jdk | = 1.7.0-update9_b31 | No fix listed |
| oracle jdk | = 1.7.0-update9_b32 | No fix listed |
| oracle jre | < 1.6.0 | 1.6.0 |
| oracle jre | = 1.6.0 | No fix listed |
| oracle jre | = 1.6.0-update1 | No fix listed |
| oracle jre | = 1.6.0-update11 | No fix listed |
| oracle jre | = 1.6.0-update12 | No fix listed |
| oracle jre | = 1.6.0-update13 | No fix listed |
| oracle jre | = 1.6.0-update14 | No fix listed |
| oracle jre | = 1.6.0-update15 | No fix listed |
| oracle jre | = 1.6.0-update16 | No fix listed |
| oracle jre | = 1.6.0-update17 | No fix listed |
| oracle jre | = 1.6.0-update18 | No fix listed |
| oracle jre | = 1.6.0-update19 | No fix listed |
| oracle jre | = 1.6.0-update2 | No fix listed |
| oracle jre | = 1.6.0-update20 | No fix listed |
| oracle jre | = 1.6.0-update21 | No fix listed |
| oracle jre | = 1.6.0-update22 | No fix listed |
| oracle jre | = 1.6.0-update23 | No fix listed |
| oracle jre | = 1.6.0-update24 | No fix listed |
| oracle jre | = 1.6.0-update25 | No fix listed |
| oracle jre | = 1.6.0-update26 | No fix listed |
| oracle jre | = 1.6.0-update3 | No fix listed |
| oracle jre | = 1.6.0-update4 | No fix listed |
| oracle jre | = 1.6.0-update5 | No fix listed |
| oracle jre | = 1.6.0-update6 | No fix listed |
| oracle jre | = 1.6.0-update7 | No fix listed |
| oracle jre | = 1.6.0-update8 | No fix listed |
| oracle jre | = 1.6.0-update9 | No fix listed |
| oracle jre | = 1.7.0 | No fix listed |
| oracle jre | = 1.7.0-update1 | No fix listed |
| oracle jre | = 1.7.0-update10 | No fix listed |
| oracle jre | = 1.7.0-update10_b31 | No fix listed |
| oracle jre | = 1.7.0-update11 | No fix listed |
| oracle jre | = 1.7.0-update13 | No fix listed |
| oracle jre | = 1.7.0-update15 | No fix listed |
| oracle jre | = 1.7.0-update17 | No fix listed |
| oracle jre | = 1.7.0-update17_b31 | No fix listed |
| oracle jre | = 1.7.0-update17_b32 | No fix listed |
| oracle jre | = 1.7.0-update2 | No fix listed |
| oracle jre | = 1.7.0-update21 | No fix listed |
| oracle jre | = 1.7.0-update21_b31 | No fix listed |
| oracle jre | = 1.7.0-update25 | No fix listed |
| oracle jre | = 1.7.0-update25_b33 | No fix listed |
| oracle jre | = 1.7.0-update25_b34 | No fix listed |
| oracle jre | = 1.7.0-update25_b35 | No fix listed |
| oracle jre | = 1.7.0-update3 | No fix listed |
| oracle jre | = 1.7.0-update4 | No fix listed |
| oracle jre | = 1.7.0-update5 | No fix listed |
| oracle jre | = 1.7.0-update6 | No fix listed |
| oracle jre | = 1.7.0-update7 | No fix listed |
| oracle jre | = 1.7.0-update7_b32 | No fix listed |
| oracle jre | = 1.7.0-update9 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 10.10 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| redhat satellite with embedded oracle | = 5.4 | No fix listed |
| SUSE linux enterprise java | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
References
- SUSE-SU-2012:0114 mailing-list third-party-advisory vendor-advisory
- HPSBUX02730 mailing-list vendor-advisory
- HPSBMU02799 mailing-list vendor-advisory
- SSRT100867 mailing-list vendor-advisory
- RHSA-2013:1455 third-party-advisory vendor-advisory
- 48308 broken-link third-party-advisory
- GLSA-201406-32 third-party-advisory vendor-advisory
- www.ibm.com product
- www.oracle.com patch vendor-advisory
- RHSA-2011:1384 broken-link vendor-advisory
- 50218 broken-link third-party-advisory vdb-entry
- 1026215 broken-link third-party-advisory vdb-entry
- USN-1263-1 third-party-advisory vendor-advisory
- oracle-jre-scripting-unspecified(70849) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:13947 broken-link signature vdb-entry
- www.cisa.gov government-resource us-government-resource