CVE-2011-0873

2011-06-1400:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.033 Low

EPSS

Percentile

91.2%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 6 Update 25 and earlier, and 5.0 Update 29 and earlier,
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to 2D.

Notes

Author	Note
mdeslaur	in natty+, NetX and the plugin moved to the icedtea-web package
sbeattie	fix for this not included in the drop from oracle, so assuming it doesn’t affect openjdk-6

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchsun-java6< 6.26-1lucid1UNKNOWN
ubuntu10.10noarchsun-java6< 6.26-1maverick1UNKNOWN
ubuntu11.04noarchsun-java6< 6.26-1nattyUNKNOWN