Published: 17/07/2014 Updated: 13/05/2022

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote malicious users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations."

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux 7.0
redhat enterprise linux 6.0
debian debian linux 7.0
redhat enterprise linux 5
oracle openjdk 1.7.0
oracle jdk 1.7.0
oracle jre 1.7.0

Several security issues were fixed in OpenJDK 7 ...

This update provides stability updates for OpenJDK 7 ...

USN-2319-1 introduced a regression in OpenJDK 7 ...

It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions (CVE-2014-4216, CVE-2014-4219) A format string flaw was discovered in the Hotspot component event logger in OpenJDK An untrusted J ...

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223 NOTE: the previous information is from the July 2014 CPU Oracle has not commented on a ...

NVD-CWE-noinfo http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/848481af9003 https://bugzilla.redhat.com/show_bug.cgi?id=1119626 http://www.debian.org/security/2014/dsa-2987 http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://seclists.org/fulldisclosure/2014/Dec/23 http://security.gentoo.org/glsa/glsa-201502-12.xml http://marc.info/?l=bugtraq&m=140852886808946&w=2 http://www.securitytracker.com/id/1030577 http://www.securityfocus.com/bid/68608 http://secunia.com/advisories/60812 http://secunia.com/advisories/60485 https://access.redhat.com/errata/RHSA-2014:0902 http://www.securityfocus.com/archive/1/534161/100/0/threaded https://nvd.nist.gov https://usn.ubuntu.com/2319-1/https://access.redhat.com/security/cve/cve-2014-2483

CVE-2014-2483

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect