CVE-2011-0863

2011-06-1400:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.3%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 6 Update 25 and earlier allows remote untrusted Java Web
Start applications and untrusted Java applets to affect confidentiality,
integrity, and availability via unknown vectors related to Deployment.

Notes

Author	Note
mdeslaur	in natty+, NetX and the plugin moved to the icedtea-web package
sbeattie	appears to only affect sun-java6, based on oracle openjdk patch drop

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchsun-java6< 6.26-1lucid1UNKNOWN
ubuntu10.10noarchsun-java6< 6.26-1maverick1UNKNOWN
ubuntu11.04noarchsun-java6< 6.26-1nattyUNKNOWN