CVE-2016-3443 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous informati...
CriticalCVSS 9.6
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.6.0-update113 | No fix listed |
| oracle jdk | = 1.7.0-update99 | No fix listed |
| oracle jdk | = 1.8.0-update77 | No fix listed |
| oracle jre | = 1.6.0-update113 | No fix listed |
| oracle jre | = 1.7.0-update99 | No fix listed |
| oracle jre | = 1.8.0-update77 | No fix listed |
References
- SUSE-SU-2016:1299 vendor-advisory
- SUSE-SU-2016:1300 vendor-advisory
- SUSE-SU-2016:1303 vendor-advisory
- SUSE-SU-2016:1378 vendor-advisory
- SUSE-SU-2016:1379 vendor-advisory
- SUSE-SU-2016:1388 vendor-advisory
- SUSE-SU-2016:1458 vendor-advisory
- SUSE-SU-2016:1475 vendor-advisory
- RHSA-2016:0677 vendor-advisory
- RHSA-2016:0678 vendor-advisory
- RHSA-2016:0679 vendor-advisory
- RHSA-2016:0701 vendor-advisory
- RHSA-2016:0702 vendor-advisory
- RHSA-2016:0708 vendor-advisory
- RHSA-2016:0716 vendor-advisory
- RHSA-2016:1039 vendor-advisory
- www.oracle.com vendor-advisory
- 86482 vdb-entry
- 1035596 vdb-entry
- www.zerodayinitiative.com
- RHSA-2016:1430 vendor-advisory
- RHSA-2017:1216 vendor-advisory
- GLSA-201606-18 vendor-advisory
- security.netapp.com