PT-2014-1241

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71 through 8 Java SE Embedded version 7u51 Description The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. This can be exploited by remot...

PT-2014-1250

Name of the Vulnerable Software and Affected Versions Java SE versions 6u71, 7u51, and 8 Java SE Embedded version 7u51 Description The issue is related to the JAXP subcomponent of the Java Development Kit and Java Runtime Environment, allowing a remote attacker to compromise data confidentiality,...

PT-2014-1255

Name of the Vulnerable Software and Affected Versions Java SE versions 6u71, 7u51, and 8 Java SE Embedded version 7u51 Description The issue is related to the Deployment subcomponent of the Java Development Kit and Java Runtime Environment, allowing a remote attacker to compromise the...

PT-2014-1261

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8 Java SE Embedded version 7u51 Description The issue affects confidentiality, integrity, and availability via unknown vectors related to Libraries. It allows remote attackers to exploit the...

PT-2014-1270

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u51 through 8 Java SE Embedded version 7u51 Description The issue affects confidentiality, integrity, and availability. It is related to the Security component of the Java Runtime Environment. Remote attackers can...

PT-2014-1274

Name of the Vulnerable Software and Affected Versions JRockit versions R27.8.1 through R28.3.1 Java SE versions 5.0u61 through 8 Java SE Embedded version 7u51 Description The issue allows a remote attacker to compromise the confidentiality and integrity of data using the 2D subcomponent. This can...

PT-2014-1275

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8 JRockit versions R27.8.1 and R28.3.1 Java SE Embedded version 7u51 Description The issue allows remote attackers to affect confidentiality and integrity via vectors related to JNDI. This can be...

PT-2014-1276

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71 through 8 Java SE Embedded version 7u51 Description The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. This is an unspecified...

PT-2014-1247

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8 JavaFX version 2.2.51 Java SE Embedded version 7u51 Description The issue allows remote attackers to affect confidentiality via unknown vectors related to 2D. Exploitation of this issue can all...

UBUNTU-CVE-2014-0456

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...

UBUNTU-CVE-2014-2397

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...

UBUNTU-CVE-2014-0452

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423...

PT-2014-1238

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8 Java SE Embedded version 7u51 Description The issue affects the confidentiality, integrity, and availability of data. It is related to the Sound component. Remote attackers can exploit this iss...

CVE-2014-1876

CVE-2014-1876 is an IBM/Oracle Java vulnerability where unpacker::redirect_stdio in unpack200 could fail to securely create temporary files when a log file cannot be opened, enabling local symlink attacks on /tmp/unpack.log. Public advisories show this affects Oracle Java SE 5/6/7/8 families and ...

PT-2014-1233

Name of the Vulnerable Software and Affected Versions OpenJDK versions 6 through 8 Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8 JRockit versions R27.8.1 and R28.3.1 Java SE Embedded version 7u51 Description The issue is related to the unpacker::redirect stdio function in unpack.cpp in...

CVE-2014-1876: Improper Link Resolution Before File Access

The unpacker::redirectstdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite...

OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle ha...

JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not comment...

CVE-2013-5893

Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented...