CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS
Percentile
86.8%
Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and
1.4.2_31 and earlier, when running on Windows, allows remote untrusted Java
Web Start applications and untrusted Java applets to affect
confidentiality, integrity, and availability via unknown vectors related to
Java Runtime Environment.
Author | Note |
---|---|
mdeslaur | in natty+, NetX and the plugin moved to the icedtea-web package |