CVE-2011-0872
published 2011-06-14CVE-2011-0872: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect…
PriorityP430medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
4.54%
90.5th percentile
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | jdk | <= 1.6.0 | — |
| sun | jdk | — | — |
| sun | jre | <= 1.6.0 | — |
| sun | jre | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_ubuntu10.0CRITICAL
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
OpenJDK 6 vulnerabilities
vendor_ubuntu·2011-06-17·CVSS 10.0
CVE-2011-0867 [CRITICAL] OpenJDK 6 vulnerabilities
Title: OpenJDK 6 vulnerabilities
Summary: Multiple OpenJDK 6 vulnerabilities have been fixed.
It was discovered that a heap overflow in the AWT FileDialog.show()
method could allow an attacker to cause a denial of service through an
application crash or possibly execute arbitrary code. (CVE-2011-0815)
It was dicovered that integer overflows in the JPEGImageReader
readImage() function and the SunLayoutEngine nativeLayout() function
could allow an attacker to cause a denial of service through an
application crash or possibly execute arbitrary code. (CVE-2011-0822,
CVE-2011-0862)
It was discovered that memory corruption could occur when interpreting
bytecode in the HotSpot VM. This could allow an attacker to cause a
denial of service through an application crash or possibly execute
arbitr
Red Hat
OpenJDK: non-blocking sockets incorrectly selected for reading (NIO, 6213702)
vendor_redhat·2011-06-07·CVSS 5.0
CVE-2011-0872 [MEDIUM] OpenJDK: non-blocking sockets incorrectly selected for reading (NIO, 6213702)
OpenJDK: non-blocking sockets incorrectly selected for reading (NIO, 6213702)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO.
Statement: Not vulnerable. This issue only affected Java versions running on Windows platform. It did not affect the versions of java-1.6.0-openjdk as shipped with Red Hat Enterprise Linux 5 and 6, and the java-1.6.0-sun packages as shipped with Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 and 6 Supplementary.
Package: java-1.6.0-sun (Red Hat Enterprise Linux 4) - Not affected
Package: java-1.6.0-openjdk (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.6.0-sun (Red Hat Enterprise Li
GHSA
GHSA-fxp4-jxc9-q23q: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect
ghsa_unreviewed·2022-05-17
CVE-2011-0872 [MEDIUM] GHSA-fxp4-jxc9-q23q: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00022.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00025.htmlhttp://marc.info/?l=bugtraq&m=132439520301822&w=2http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=134254957702612&w=2http://secunia.com/advisories/44930http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://support.avaya.com/css/P8/documents/100147041http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.htmlhttp://www.ibm.com/developerworks/java/jdk/alerts/http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlhttp://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.htmlhttp://www.us-cert.gov/cas/techalerts/TA11-201A.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14241https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14915http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00022.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00025.htmlhttp://marc.info/?l=bugtraq&m=132439520301822&w=2http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=134254957702612&w=2http://secunia.com/advisories/44930http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://support.avaya.com/css/P8/documents/100147041http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.htmlhttp://www.ibm.com/developerworks/java/jdk/alerts/http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlhttp://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.htmlhttp://www.us-cert.gov/cas/techalerts/TA11-201A.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14241https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14915
2011-06-14
Published