CVE-2011-0868
published 2011-06-14CVE-2011-0868: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect…
PriorityP429medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
4.27%
89.9th percentile
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | jdk | <= 1.6.0 | — |
| sun | jdk | — | — |
| sun | jre | <= 1.6.0 | — |
| sun | jre | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_ubuntu10.0CRITICAL
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
OpenJDK 6 vulnerabilities
vendor_ubuntu·2011-06-17·CVSS 10.0
CVE-2011-0867 [CRITICAL] OpenJDK 6 vulnerabilities
Title: OpenJDK 6 vulnerabilities
Summary: Multiple OpenJDK 6 vulnerabilities have been fixed.
It was discovered that a heap overflow in the AWT FileDialog.show()
method could allow an attacker to cause a denial of service through an
application crash or possibly execute arbitrary code. (CVE-2011-0815)
It was dicovered that integer overflows in the JPEGImageReader
readImage() function and the SunLayoutEngine nativeLayout() function
could allow an attacker to cause a denial of service through an
application crash or possibly execute arbitrary code. (CVE-2011-0822,
CVE-2011-0862)
It was discovered that memory corruption could occur when interpreting
bytecode in the HotSpot VM. This could allow an attacker to cause a
denial of service through an application crash or possibly execute
arbitr
Red Hat
OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495)
vendor_redhat·2011-06-07·CVSS 5.0
CVE-2011-0868 [MEDIUM] OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495)
OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Package: java-1.4.2-ibm (Red Hat Enterprise Linux 4) - Not affected
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 4) - Not affected
Package: java-1.4.2-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 6) - Not affected
GHSA
GHSA-fhfc-54fp-3m9x: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect
ghsa_unreviewed·2022-05-17
CVE-2011-0868 [MEDIUM] GHSA-fhfc-54fp-3m9x: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.htmlhttp://marc.info/?l=bugtraq&m=132439520301822&w=2http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=134254957702612&w=2http://rhn.redhat.com/errata/RHSA-2013-1455.htmlhttp://secunia.com/advisories/44818http://secunia.com/advisories/44930http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://support.avaya.com/css/P8/documents/100144512http://support.avaya.com/css/P8/documents/100147041http://www.debian.org/security/2011/dsa-2311http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.htmlhttp://www.ibm.com/developerworks/java/jdk/alerts/http://www.mandriva.com/security/advisories?name=MDVSA-2011:126http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlhttp://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0856.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0857.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0860.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0938.htmlhttp://www.us-cert.gov/cas/techalerts/TA11-201A.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14264https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14827http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.htmlhttp://marc.info/?l=bugtraq&m=132439520301822&w=2http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=134254957702612&w=2http://rhn.redhat.com/errata/RHSA-2013-1455.htmlhttp://secunia.com/advisories/44818http://secunia.com/advisories/44930http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://support.avaya.com/css/P8/documents/100144512http://support.avaya.com/css/P8/documents/100147041http://www.debian.org/security/2011/dsa-2311http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.htmlhttp://www.ibm.com/developerworks/java/jdk/alerts/http://www.mandriva.com/security/advisories?name=MDVSA-2011:126http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlhttp://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0856.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0857.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0860.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0938.htmlhttp://www.us-cert.gov/cas/techalerts/TA11-201A.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14264https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14827
2011-06-14
Published