CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
84.2%
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Vendor | Product | Version | CPE |
---|---|---|---|
sun | jre | 1.6.0 | cpe:/a:sun:jre:1.6.0:update_10:: |
sun | jre | 1.6.0 | cpe:/a:sun:jre:1.6.0:update_5:: |
sun | jdk | 1.6.0 | cpe:/a:sun:jdk:1.6.0:update_5:: |
sun | jre | 1.6.0 | cpe:/a:sun:jre:1.6.0:update_21:: |
sun | jdk | 1.6.0 | cpe:/a:sun:jdk:1.6.0:update_19:: |
sun | jdk | 1.6.0 | cpe:/a:sun:jdk:1.6.0:update_13:: |
sun | jre | 1.6.0 | cpe:/a:sun:jre:1.6.0:update_11:: |
sun | jre | 1.6.0 | cpe:/a:sun:jre:1.6.0:update_7:: |
sun | jdk | 1.6.0 | cpe:/a:sun:jdk:1.6.0:update_22:: |
sun | jre | 1.6.0 | cpe:/a:sun:jre:1.6.0:update_24:: |
lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
marc.info/?l=bugtraq&m=132750579901589&w=2
marc.info/?l=bugtraq&m=134254866602253&w=2
marc.info/?l=bugtraq&m=134254957702612&w=2
rhn.redhat.com/errata/RHSA-2013-1455.html
secunia.com/advisories/48308
www.ibm.com/developerworks/java/jdk/alerts/
www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
www.redhat.com/support/errata/RHSA-2011-1384.html
www.securityfocus.com/bid/50229
www.securitytracker.com/id?1026215
exchange.xforce.ibmcloud.com/vulnerabilities/70851
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14273