CVE-2011-0817: Critical severity java development kit (jdk) vulnerability

Q: What is the severity of CVE-2011-0817?

CVE-2011-0817 has a high severity rating due to its potential impact on confidentiality, integrity, and availability.

Q: How do I fix CVE-2011-0817?

To fix CVE-2011-0817, update the Java Runtime Environment to a version later than Java SE 6 Update 25.

Q: What platforms are affected by CVE-2011-0817?

CVE-2011-0817 affects the Java Runtime Environment running on Windows systems.

Q: What versions of Java are vulnerable in CVE-2011-0817?

CVE-2011-0817 affects Oracle Java SE 6 Update 25 and earlier versions.

Q: Is there a workaround for CVE-2011-0817 if I cannot update Java?

Disabling Java applets and untrusted Java Web Start applications may mitigate the risk associated with CVE-2011-0817.

Published Jun 14, 2011

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected Software

49 affected components

Java Development Kit (JDK)<=1.6.0

Java Development Kit (JDK)=1.6.0

Java Development Kit (JDK)=1.6.0-update_10

Java Development Kit (JDK)=1.6.0-update_11

Java Development Kit (JDK)=1.6.0-update_12

Java Development Kit (JDK)=1.6.0-update_13

Java Development Kit (JDK)=1.6.0-update_14

Java Development Kit (JDK)=1.6.0-update_15

Java Development Kit (JDK)=1.6.0-update_16

Java Development Kit (JDK)=1.6.0-update_17

Java Development Kit (JDK)=1.6.0-update_18

Java Development Kit (JDK)=1.6.0-update_19

Java Development Kit (JDK)=1.6.0-update_20

Java Development Kit (JDK)=1.6.0-update_21

Java Development Kit (JDK)=1.6.0-update_22

Java Development Kit (JDK)=1.6.0-update_23

Java Development Kit (JDK)=1.6.0-update_24

Java Development Kit (JDK)=1.6.0-update_3

Java Development Kit (JDK)=1.6.0-update_4

Java Development Kit (JDK)=1.6.0-update_5

Java Development Kit (JDK)=1.6.0-update_6

Java Development Kit (JDK)=1.6.0-update_7

Java Development Kit (JDK)=1.6.0-update1

Java Development Kit (JDK)=1.6.0-update2

Sun Java Runtime Environment (JRE)<=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0-update_1

Sun Java Runtime Environment (JRE)=1.6.0-update_10

Sun Java Runtime Environment (JRE)=1.6.0-update_11

Sun Java Runtime Environment (JRE)=1.6.0-update_12

Sun Java Runtime Environment (JRE)=1.6.0-update_13

Sun Java Runtime Environment (JRE)=1.6.0-update_14

Sun Java Runtime Environment (JRE)=1.6.0-update_15

Sun Java Runtime Environment (JRE)=1.6.0-update_16

Sun Java Runtime Environment (JRE)=1.6.0-update_17

Sun Java Runtime Environment (JRE)=1.6.0-update_18

Sun Java Runtime Environment (JRE)=1.6.0-update_19

Sun Java Runtime Environment (JRE)=1.6.0-update_2

Sun Java Runtime Environment (JRE)=1.6.0-update_20

Sun Java Runtime Environment (JRE)=1.6.0-update_21

Sun Java Runtime Environment (JRE)=1.6.0-update_22

Sun Java Runtime Environment (JRE)=1.6.0-update_23

Sun Java Runtime Environment (JRE)=1.6.0-update_24

Sun Java Runtime Environment (JRE)=1.6.0-update_3

Sun Java Runtime Environment (JRE)=1.6.0-update_4

Sun Java Runtime Environment (JRE)=1.6.0-update_5

Sun Java Runtime Environment (JRE)=1.6.0-update_6

Sun Java Runtime Environment (JRE)=1.6.0-update_7

Microsoft Windows

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html

Event History

Jun 14, 2011

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

06:55 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-0817?

CVE-2011-0817 has a high severity rating due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2011-0817?