[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-3065Date: (C)2014-12-09   (M)2023-12-22


Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.9
Exploit Score: 3.4
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
BID-71147
IV66044
IV66045
RHSA-2014:1876
RHSA-2014:1877
RHSA-2014:1880
RHSA-2014:1881
RHSA-2014:1882
RHSA-2015:0264
SUSE-SU-2014:1526
SUSE-SU-2014:1549
SUSE-SU-2015:0344
SUSE-SU-2015:0345
SUSE-SU-2015:0376
SUSE-SU-2015:0392
http://www-01.ibm.com/support/docview.wss?uid=swg21688283
https://bugzilla.redhat.com/show_bug.cgi?id=1162554

CPE    46
cpe:/a:ibm:java:5.0.16.3
cpe:/a:ibm:java:5.0.16.2
cpe:/a:ibm:java:6.0.8.1
cpe:/a:ibm:java:6.0.8.0
...
CWE    1
CWE-94
OVAL    6
oval:org.secpod.oval:def:505617
oval:org.secpod.oval:def:505619
oval:org.secpod.oval:def:505660
oval:org.secpod.oval:def:21591
...

© SecPod Technologies