CVEvulnerability
CVE-2014-3065
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
Affected configurations
• ibm java 5.0.0.0
• ibm java 5.0.11.0
• ibm java 5.0.11.1
• ibm java 5.0.11.2
• ibm java 5.0.12.0
• ibm java 5.0.12.1
• ibm java 5.0.12.2
• ibm java 5.0.12.3
• ibm java 5.0.12.4
• ibm java 5.0.12.5
• ibm java 5.0.13.0
• ibm java 5.0.14.0
• ibm java 5.0.15.0
• ibm java 5.0.16.0
• ibm java 5.0.16.1
• ibm java 5.0.16.2
• ibm java 5.0.16.3
• ibm java 6.0.0.0
• ibm java 6.0.1.0
• ibm java 6.0.2.0
• ibm java 6.0.3.0
• ibm java 6.0.4.0
• ibm java 6.0.5.0
• ibm java 6.0.6.0
• ibm java 6.0.7.0
• ibm java 6.0.8.0
• ibm java 6.0.8.1
• ibm java 6.0.9.0
• ibm java 6.0.9.1
• ibm java 6.0.9.2
• ibm java 6.0.10.0
• ibm java 6.0.10.1
• ibm java 6.0.11.0
• ibm java 6.0.12.0
• ibm java 6.0.13.0
• ibm java 6.0.13.1
• ibm java 6.0.13.2
• ibm java 6.0.14.0
• ibm java 7.0.0.0
• ibm java 7.0.1.0
• ibm java 7.0.2.0
• ibm java 7.0.3.0
• ibm java 7.0.4.0
• ibm java 7.0.4.1
• ibm java 7.0.4.2
• ibm java 7.0.5.0
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2014-1876.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-1877.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-1880.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-1881.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-1882.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-0264.html rhn.redhat.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV66044 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV66045 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21688283 Vendor Advisory
- http://www.securityfocus.com/bid/71147 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1162554 bugzilla.redhat.com
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2014-1876.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-1877.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-1880.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-1881.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-1882.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-0264.html rhn.redhat.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV66044 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV66045 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21688283 Vendor Advisory
- http://www.securityfocus.com/bid/71147 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1162554 bugzilla.redhat.com