Veracode Vulnerability DatabaseVERACODE:24765Arbitrary Code Execution
EPSS
Percentile
87.1%
java is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the HotSpot component in OpenJDK. Certain bytecode instructions confused the memory management within the Java Virtual Machine (JVM), resulting in an applet or application crashing.
References
lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html
marc.info/?l=bugtraq&m=132439520301822&w=2
marc.info/?l=bugtraq&m=133728004526190&w=2
marc.info/?l=bugtraq&m=134254866602253&w=2
marc.info/?l=bugtraq&m=134254957702612&w=2
secunia.com/advisories/44818
secunia.com/advisories/44930
secunia.com/advisories/49198
security.gentoo.org/glsa/glsa-201406-32.xml
support.avaya.com/css/P8/documents/100144512
www.debian.org/security/2011/dsa-2311
www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.html
www.ibm.com/developerworks/java/jdk/alerts/
www.mandriva.com/security/advisories?name=MDVSA-2011:126
www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html
www.redhat.com/support/errata/RHSA-2011-0856.html
www.redhat.com/support/errata/RHSA-2011-0857.html
www.redhat.com/support/errata/RHSA-2011-0860.html
access.redhat.com/errata/RHSA-2011:0856
access.redhat.com/security/updates/classification/#critical
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14225
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14632
Related
