Veracode Vulnerability DatabaseVERACODE:24765Arbitrary Code Execution
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
java is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the HotSpot component in OpenJDK. Certain bytecode instructions confused the memory management within the Java Virtual Machine (JVM), resulting in an applet or application crashing.
References
lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html
marc.info/?l=bugtraq&m=132439520301822&w=2
marc.info/?l=bugtraq&m=133728004526190&w=2
marc.info/?l=bugtraq&m=134254866602253&w=2
marc.info/?l=bugtraq&m=134254957702612&w=2
secunia.com/advisories/44818
secunia.com/advisories/44930
secunia.com/advisories/49198
security.gentoo.org/glsa/glsa-201406-32.xml
support.avaya.com/css/P8/documents/100144512
www.debian.org/security/2011/dsa-2311
www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.html
www.ibm.com/developerworks/java/jdk/alerts/
www.mandriva.com/security/advisories?name=MDVSA-2011:126
www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html
www.redhat.com/support/errata/RHSA-2011-0856.html
www.redhat.com/support/errata/RHSA-2011-0857.html
www.redhat.com/support/errata/RHSA-2011-0860.html
access.redhat.com/errata/RHSA-2011:0856
access.redhat.com/security/updates/classification/#critical
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14225
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14632
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C