Arbitrary Code Execution

2019-01-1509:00:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

openjdk is vulnerable to arbitrary code execution attacks. The vulnerability exists through an unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CPENameOperatorVersion
java-1.7.0-openjdkeq1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdkeq1.7.0.45__2.4.3.2.el6_4
java-1.7.0-openjdkeq1.7.0.9__2.3.3.2.el6_3
java-1.7.0-openjdkeq1.7.0.45__2.4.3.4.el6_5
java-1.7.0-openjdkeq1.7.0.9__2.3.7.1.el5_9
java-1.7.0-openjdkeq1.7.0.45__2.4.3.3.el6
java-1.7.0-openjdkeq1.7.0.9__2.3.8.0.el5_9
java-1.7.0-openjdkeq1.7.0.25__2.3.10.5.el5_9
java-1.7.0-openjdkeq1.7.0.25__2.3.10.4.el5_9
java-1.7.0-openjdkeq1.7.0.51__2.4.4.2.el5_10

Name	Operator	Version
java-1.7.0-openjdk	eq	1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdk	eq	1.7.0.45__2.4.3.2.el6_4
java-1.7.0-openjdk	eq	1.7.0.9__2.3.3.2.el6_3
java-1.7.0-openjdk	eq	1.7.0.45__2.4.3.4.el6_5
java-1.7.0-openjdk	eq	1.7.0.9__2.3.7.1.el5_9
java-1.7.0-openjdk	eq	1.7.0.45__2.4.3.3.el6
java-1.7.0-openjdk	eq	1.7.0.9__2.3.8.0.el5_9
java-1.7.0-openjdk	eq	1.7.0.25__2.3.10.5.el5_9
java-1.7.0-openjdk	eq	1.7.0.25__2.3.10.4.el5_9
java-1.7.0-openjdk	eq	1.7.0.51__2.4.4.2.el5_10