CVE-2011-0862
critical
CVSS v3
—
CVSS v4 NEW
—
VIR risk
10.0
Description
Multiple unspecified vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| sun | jdk | {"endIncluding":"1.4.2_31"} | |
| sun | jdk | 1.4.2 | |
| sun | jdk | 1.4.2_1 | |
| sun | jdk | 1.4.2_2 | |
| sun | jdk | 1.4.2_3 | |
| sun | jdk | 1.4.2_4 | |
| sun | jdk | 1.4.2_5 | |
| sun | jdk | 1.4.2_6 | |
| sun | jdk | 1.4.2_7 | |
| sun | jdk | 1.4.2_8 | |
| sun | jdk | 1.4.2_9 | |
| sun | jdk | 1.4.2_10 | |
| sun | jdk | 1.4.2_11 | |
| sun | jdk | 1.4.2_12 | |
| sun | jdk | 1.4.2_13 | |
| sun | jdk | 1.4.2_14 | |
| sun | jdk | 1.4.2_15 | |
| sun | jdk | 1.4.2_16 | |
| sun | jdk | 1.4.2_17 | |
| sun | jdk | 1.4.2_18 | |
| sun | jdk | 1.4.2_19 | |
| sun | jdk | 1.4.2_20 | |
| sun | jdk | 1.4.2_21 | |
| sun | jdk | 1.4.2_22 | |
| sun | jdk | 1.4.2_23 | |
| sun | jdk | 1.4.2_24 | |
| sun | jdk | 1.4.2_25 | |
| sun | jdk | 1.4.2_26 | |
| sun | jdk | 1.4.2_27 | |
| sun | jdk | 1.4.2_28 | |
| sun | jdk | 1.4.2_29 | |
| sun | jdk | 1.4.2_30 | |
| sun | jre | {"endIncluding":"1.4.2_31"} | |
| sun | jre | 1.4.2 | |
| sun | jre | 1.4.2_1 | |
| sun | jre | 1.4.2_2 | |
| sun | jre | 1.4.2_3 | |
| sun | jre | 1.4.2_4 | |
| sun | jre | 1.4.2_5 | |
| sun | jre | 1.4.2_6 | |
| sun | jre | 1.4.2_7 | |
| sun | jre | 1.4.2_8 | |
| sun | jre | 1.4.2_9 | |
| sun | jre | 1.4.2_10 | |
| sun | jre | 1.4.2_11 | |
| sun | jre | 1.4.2_12 | |
| sun | jre | 1.4.2_13 | |
| sun | jre | 1.4.2_14 | |
| sun | jre | 1.4.2_15 | |
| sun | jre | 1.4.2_16 | |
| sun | jre | 1.4.2_17 | |
| sun | jre | 1.4.2_18 | |
| sun | jre | 1.4.2_19 | |
| sun | jre | 1.4.2_20 | |
| sun | jre | 1.4.2_21 | |
| sun | jre | 1.4.2_22 | |
| sun | jre | 1.4.2_23 | |
| sun | jre | 1.4.2_24 | |
| sun | jre | 1.4.2_25 | |
| sun | jre | 1.4.2_26 | |
| sun | jre | 1.4.2_27 | |
| sun | jre | 1.4.2_28 | |
| sun | jre | 1.4.2_29 | |
| sun | jre | 1.4.2_30 | |
| sun | jdk | 1.6.0 | |
| sun | jre | 1.6.0 | |
| sun | jdk | 1.5.0 | |
| sun | jre | 1.5.0 | |
References
- http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00025.html
- http://marc.info/?l=bugtraq&m=132439520301822&w=2
- http://marc.info/?l=bugtraq&m=133728004526190&w=2
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- http://rhn.redhat.com/errata/RHSA-2013-1455.html
- http://secunia.com/advisories/44818
- http://secunia.com/advisories/44930
- http://secunia.com/advisories/49198
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://support.avaya.com/css/P8/documents/100144512
- http://support.avaya.com/css/P8/documents/100147041
- http://www.debian.org/security/2011/dsa-2311
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.html
- http://www.ibm.com/developerworks/java/jdk/alerts/
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:126
- http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
- http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html
- http://www.redhat.com/support/errata/RHSA-2011-0856.html
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.