Veille CVE
CVE-2011-3544
9.8 Critique Exploitée activementCatalogue CISA KEV — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Ajoutée le 03/03/2022 · Échéance de correction (agences US) : 24/03/2022
Action requise : Apply updates per vendor instructions.
Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 9.8 Critique | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 10.0 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html Mailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=134254866602253&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List
- http://rhn.redhat.com/errata/RHSA-2013-1455.html Third Party Advisory
- http://secunia.com/advisories/48308 Broken Link
- http://security.gentoo.org/glsa/glsa-201406-32.xml Third Party Advisory
- http://www.ibm.com/developerworks/java/jdk/alerts/ Product
- http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html PatchVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1384.html Broken Link
- http://www.securityfocus.com/bid/50218 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1026215 Broken LinkThird Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-1263-1 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70849 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13947 Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html Mailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=134254866602253&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List
- http://rhn.redhat.com/errata/RHSA-2013-1455.html Third Party Advisory
- http://secunia.com/advisories/48308 Broken Link
- http://security.gentoo.org/glsa/glsa-201406-32.xml Third Party Advisory
- http://www.ibm.com/developerworks/java/jdk/alerts/ Product
- http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html PatchVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1384.html Broken Link
- http://www.securityfocus.com/bid/50218 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1026215 Broken LinkThird Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-1263-1 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70849 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13947 Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-3544 US Government Resource