CVE-2011-3551

2011-10-1921:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

oracle

java

jdk

jre

vulnerability

security

nvd

cve-2011-3551

8.1 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

86.0%

JSON

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CPENameOperatorVersion
sun:jresun jreeq1.7.0
sun:jdksun jdkeq1.7.0
oracle:jrockitoracle jrockitler28.1.4
oracle:jrockitoracle jrockiteqr28.1.0
oracle:jrockitoracle jrockiteqr28.1.1
oracle:jrockitoracle jrockiteqr28.1.3
oracle:jrockitoracle jrockiteqr28.0.1
oracle:jrockitoracle jrockiteqr28.0.2
oracle:jrockitoracle jrockiteqr28.0.0
sun:jdksun jdkeq1.6.0

CPE	Name	Operator	Version
sun:jre	sun jre	eq	1.7.0
sun:jdk	sun jdk	eq	1.7.0
oracle:jrockit	oracle jrockit	le	r28.1.4
oracle:jrockit	oracle jrockit	eq	r28.1.0
oracle:jrockit	oracle jrockit	eq	r28.1.1
oracle:jrockit	oracle jrockit	eq	r28.1.3
oracle:jrockit	oracle jrockit	eq	r28.0.1
oracle:jrockit	oracle jrockit	eq	r28.0.2
oracle:jrockit	oracle jrockit	eq	r28.0.0
sun:jdk	sun jdk	eq	1.6.0