CVE-2014-2401 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
MediumCVSS 5.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle javafx | = 2.2.51 | No fix listed |
| oracle jdk | = 1.5.0-update61 | No fix listed |
| oracle jdk | = 1.6.0-update71 | No fix listed |
| oracle jdk | = 1.7.0-update51 | No fix listed |
| oracle jdk | = 1.8.0 | No fix listed |
| oracle jre | = 1.5.0-update61 | No fix listed |
| oracle jre | = 1.6.0-update71 | No fix listed |
| oracle jre | = 1.7.0-update51 | No fix listed |
| oracle jre | = 1.8.0 | No fix listed |
| ibm forms viewer | >= 4.0.0, < 4.0.0.3 | 4.0.0.3 |
| ibm forms viewer | >= 8.0.0, < 8.0.1.1 | 8.0.1.1 |
References
- HPSBUX03091 issue-tracking mailing-list third-party-advisory vendor-advisory
- HPSBUX03092 issue-tracking mailing-list third-party-advisory vendor-advisory
- 58974 third-party-advisory
- 59058 third-party-advisory
- GLSA-201502-12 third-party-advisory vendor-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com broken-link
- www.oracle.com vendor-advisory
- 66911 third-party-advisory vdb-entry
- RHSA-2014:0413 third-party-advisory vendor-advisory
- RHSA-2014:0414 third-party-advisory vendor-advisory
- www.ibm.com third-party-advisory