CVE-2014-2428

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS v2.0 7.6 HIGH

7.6^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 4.9 / Impact : 10.0

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://marc.info/?l=bugtraq&m=140852886808946&w=2	Issue Tracking Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2	Issue Tracking Mailing List Third Party Advisory
http://security.gentoo.org/glsa/glsa-201502-12.xml	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html	Third Party Advisory Vendor Advisory
http://www.securityfocus.com/bid/66870	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2014:0413	Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0414	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:jdk:1.6.0:update71::::::
	cpe:2.3:a:oracle:jdk:1.7.0:update51::::::
	cpe:2.3:a:oracle:jdk:1.8.0:-::::::
	cpe:2.3:a:oracle:jre:1.6.0:update71::::::
	cpe:2.3:a:oracle:jre:1.7.0:update51::::::
	cpe:2.3:a:oracle:jre:1.8.0:-::::::

Configuration 2 (hide)

AND

OR	cpe:2.3:a:ibm:forms_viewer::::::::
	cpe:2.3:a:ibm:forms_viewer::::::::

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-04-16 02:55

Updated : 2022-05-13 14:57

NVD link : CVE-2014-2428

Mitre link : CVE-2014-2428

CVE.ORG link : CVE-2014-2428

JSON object : View

Products Affected

oracle

jre
jdk

microsoft

windows

ibm

forms_viewer

CWE

NVD-CWE-noinfo

{"id": "CVE-2014-2428", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-04-16T02:55:15.867", "references": [{"url": "http://marc.info/?l=bugtraq&m=140852886808946&w=2", "tags": ["Issue Tracking", "Mailing List", "Third Party Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://marc.info/?l=bugtraq&m=140852974709252&w=2", "tags": ["Issue Tracking", "Mailing List", "Third Party Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://security.gentoo.org/glsa/glsa-201502-12.xml", "tags": ["Third Party Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21672080", "tags": ["Third Party Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html", "tags": ["Third Party Advisory", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/66870", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert_us@oracle.com"}, {"url": "https://access.redhat.com/errata/RHSA-2014:0413", "tags": ["Third Party Advisory"], "source": "secalert_us@oracle.com"}, {"url": "https://access.redhat.com/errata/RHSA-2014:0414", "tags": ["Third Party Advisory"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Oracle Java SE 6u71, 7u51, y 8, y Java SE Embedded 7u51, permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a trav\u00e9s de vectores desconocidos relacionados con la implementaci\u00f3n."}], "lastModified": "2022-05-13T14:57:20.713", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update71:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDD27C84-32AD-47CC-B47B-7FBA1321E717"}, {"criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3343969B-2926-4C55-8787-792ABF6429D7"}, {"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F906BFD6-7654-46C5-8240-3A50949CAE85"}, {"criteria": "cpe:2.3:a:oracle:jre:1.6.0:update71:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78BC97BC-F745-45E0-8749-41535F7C374E"}, {"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update51:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DA64EFB-8416-4A0B-91B5-F02CC1A79D40"}, {"criteria": "cpe:2.3:a:oracle:jre:1.8.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA226495-4733-485A-9D53-85874434815D"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:forms_viewer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "745E0942-12A9-49B3-851C-ED67F047BCEB", "versionEndExcluding": "4.0.0.3", "versionStartIncluding": "4.0.0"}, {"criteria": "cpe:2.3:a:ibm:forms_viewer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5452C9C6-D761-4E3D-B7CF-C0AC55D08650", "versionEndExcluding": "8.0.1.1", "versionStartIncluding": "8.0.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "secalert_us@oracle.com"}