Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-0483
HistoryJan 21, 2016 - 3:00 a.m.

CVE-2016-0483

2016-01-2103:00:31
[email protected]
web.nvd.nist.gov
137
cve-2016-0483
oracle java se
java se embedded
jrockit r28.3.8
vulnerability
awt

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%

JSON

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data.

Affected configurations

NVD
Node
oraclejdkMatch1.6.0update105
OR
oraclejdkMatch1.7.0update91
OR
oraclejdkMatch1.8.0update66
OR
oraclejreMatch1.6.0update105
OR
oraclejreMatch1.7.0update91
OR
oraclejreMatch1.8.0update66
Node
oraclejrockitMatchr28.3.8
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch15.04
OR
canonicalubuntu_linuxMatch15.10

References

Related

zdi 1
atlassian 6
ubuntucve 1
debiancve 1
nvd 1
ibm 28
prion 1
cvelist 1
nessus 55
f5 2
amazon 3
openvas 47
ubuntu 2
oraclelinux 5
redhat 12
centos 5
debian 3
veracode 5
mageia 1
osv 1
suse 16
kaspersky 1
aix 1
zdi
zdi
Oracle Java readImage Heap Overflow Remote Code Execution Vulnerability
2016-01-25 00:00:00
atlassian
atlassian
Update Java version bundled found in the installer to a version >= 1.8u71
2016-02-04 02:48:28
Update Java version bundled found in the installer to a version >= 1.8u71
2016-02-04 02:52:06
Update Java version bundled found in the installer to a version >= 1.8u71
2016-02-04 02:52:06
ubuntucve
ubuntucve
CVE-2016-0483
2016-01-20 00:00:00
debiancve
debiancve
CVE-2016-0483
2016-01-21 03:00:31
nvd
nvd
CVE-2016-0483
2016-01-21 03:00:31
ibm
ibm
Security Bulletin: A vulnerability in IBM Java Runtime affects IBM QuickFile (CVE-2016-0483)
2018-06-16 19:59:24
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System (CVE-2016-0483 and CVE-2015-7575)
2018-06-16 21:40:12
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM b-type SAN Network Advisor (CVE-2016-0483, CVE-2016-0466, CVE-2016-0475)
2018-06-18 00:28:23
prion
prion
Heap overflow
2016-01-21 03:00:00
cvelist
cvelist
CVE-2016-0483
2016-01-21 02:00:00
nessus
nessus
F5 Networks BIG-IP : Java vulnerabilities (K50118123)
2016-10-10 00:00:00
Oracle JRockit R28 < R28.3.9 Multiple Vulnerabilities (January 2016 CPU) (SLOTH)
2016-01-21 00:00:00
RHEL 5 / 6 / 7 : java-1.6.0-openjdk (RHSA-2016:0067)
2016-01-27 00:00:00
f5
f5
SOL50118123 - Java vulnerabilities CVE-2016-0466 and CVE-2016-0483
2016-04-05 00:00:00
K50118123 : Java vulnerabilities CVE-2016-0466 and CVE-2016-0483
2016-04-05 00:00:00
amazon
amazon
Important: java-1.6.0-openjdk
2016-02-19 15:48:00
Important: java-1.8.0-openjdk
2016-02-09 13:30:00
Important: java-1.7.0-openjdk
2016-02-09 13:30:00
openvas
openvas
CentOS Update for java CESA-2016:0067 centos5
2016-01-27 00:00:00
RedHat Update for java-1.6.0-openjdk RHSA-2016:0067-01
2016-01-27 00:00:00
CentOS Update for java CESA-2016:0067 centos6
2016-01-27 00:00:00
ubuntu
ubuntu
OpenJDK 6 vulnerabilities
2016-02-01 00:00:00
OpenJDK 7 vulnerabilities
2016-02-01 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2016-01-26 00:00:00
java-1.7.0-openjdk security update
2016-01-21 00:00:00
java-1.7.0-openjdk security update
2016-01-21 00:00:00
redhat
redhat
(RHSA-2016:0067) Important: java-1.6.0-openjdk security update
2016-01-26 00:00:00
(RHSA-2016:0053) Critical: java-1.7.0-openjdk security update
2016-01-21 00:00:00
(RHSA-2016:0049) Critical: java-1.8.0-openjdk security update
2016-01-20 18:56:54
centos
centos
java security update
2016-01-26 13:28:19
java security update
2016-01-21 19:37:41
java security update
2016-01-21 17:21:45
debian
debian
[SECURITY] [DSA 3458-1] openjdk-7 security update
2016-01-27 21:00:48
[SECURITY] [DSA 3465-1] openjdk-6 security update
2016-02-02 21:31:52
[SECURITY] [DLA 410-1] openjdk-6 security update
2016-02-04 14:03:48
veracode
veracode
Sandbox Restrictions Bypass
2019-05-02 05:20:30
Sandbox Restrictions Bypass
2019-05-02 05:20:30
Sandbox Restrictions Bypass
2019-05-02 05:20:30
mageia
mageia
Updated java-1.8.0-openjdk/copy-jdk-configs/lua-lunit/lua-posix packages fix security vulnerability
2016-02-05 20:26:09
osv
osv
openjdk-6 - security update
2016-02-04 00:00:00
suse
suse
Security update for java-1_8_0-openjdk (critical)
2016-01-27 21:11:29
Security update for java-1_7_0-openjdk (critical)
2016-01-27 21:14:13
Security update for java-1_8_0-openjdk (critical)
2016-01-27 15:13:41
kaspersky
kaspersky
KLA10743 Multiple vulnerabilities in Oracle Java SE
2016-01-20 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2016-02-25 08:44:57

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%

JSON
Related for CVE-2016-0483
zdi1atlassian6ubuntucve1debiancve1nvd1ibm28prion1cvelist1nessus55f52amazon3openvas47ubuntu2oraclelinux5redhat12centos5debian3veracode5mageia1osv1suse16kaspersky1aix1