KLA10548 Multiple vulnerabilities in Oracle products

An unspecified vulnerabilities were found in Oracle products. By exploiting these vulnerabilities malicious users can affect integrity, availability and confidentiality. These vulnerabilities can be exploited remotely via an unknown vectors related to 2D, Hotspot, JavaFX, Delpoyment, Tools, JSSE, Beans and JCE.

Original advisories

Oracle bulletin

Related products

Oracle-Java-JRE-1.7.x

Oracle-Java-JDK-1.7.x

Oracle-Java-JDK-1.8.x-3

Oracle-Java-JRE-1.8.x

Oracle-JRockit

CVE list

CVE-2015-0204 warning

CVE-2015-0484 high

CVE-2015-0492 critical

CVE-2015-0469 critical

CVE-2015-0478 warning

CVE-2015-0480 high

CVE-2015-0477 warning

CVE-2015-0458 critical

CVE-2015-0459 critical

CVE-2015-0470 warning

CVE-2015-0488 critical

CVE-2015-0486 critical

CVE-2015-0491 critical

CVE-2015-0460 critical

Solution

Update to the latest version

Get Java SE

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• LoI

Loss of integrity. Exploitation of vulnerabilities with this impact can lead to partial system fault or system components connection disruption.

Affected Products

• Oracle Java SE 5u81, 6u91, 7u76, 8u40Oracle JavaFX 2.2.76Oracle JRockit R28.3.5