CVE-2011-0868 — JDK vulnerability

6 documents6 sources

Severity

5.0MEDIUMNVD

EPSS

8.5%

top 7.59%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE

Timeline

PublishedJun 14

Latest updateMay 17

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDsun/jdk1.6.0+1

▶NVDsun/jre1.6.0+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-fhfc-54fp-3m9x: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect↗2022-05-17

▶

CVEList

CVE-2011-0868: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect↗2011-06-14

▶

📋Vendor Advisories

Ubuntu

OpenJDK 6 vulnerabilities↗2011-06-17

▶

Red Hat

OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495)↗2011-06-07

▶

💬Community

Bugzilla

CVE-2011-0868 OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495)↗2011-05-19

▶