CVE-2014-0417 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown....
HighCVSS 9.3
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.5.0-update55 | No fix listed |
| oracle jdk | = 1.6.0-update65 | No fix listed |
| oracle jre | = 1.5.0-update55 | No fix listed |
| oracle jre | = 1.7.0-update45 | No fix listed |
| oracle jre | = 1.6.0-update65 | No fix listed |
| oracle javafx | = 2.2.45 | No fix listed |
References
- SUSE-SU-2014:0246 vendor-advisory
- SUSE-SU-2014:0266 vendor-advisory
- SUSE-SU-2014:0451 vendor-advisory
- SSRT101454 vendor-advisory
- SSRT101455 vendor-advisory
- 102001 vdb-entry
- RHSA-2014:0030 vendor-advisory
- RHSA-2014:0134 vendor-advisory
- RHSA-2014:0135 vendor-advisory
- RHSA-2014:0136 vendor-advisory
- 56484 third-party-advisory
- 56485 third-party-advisory
- 56486 third-party-advisory
- 56535 third-party-advisory
- www.oracle.com vendor-advisory
- 64758 vdb-entry
- 64932 vdb-entry
- 1029608 vdb-entry
- RHSA-2014:0414 vendor-advisory
- h20566.www2.hpe.com