K50118123 : Java vulnerabilities CVE-2016-0466 and CVE-2016-0483

Security Advisory Description

• CVE-2016-0466

Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.

• CVE-2016-0483

Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Impact
An attacker, through specially crafted file types, may be able to cause a Java application to bypass Java sandbox restrictions, cause a disruption of service, or possibly execute arbitrary code.