CVE-2011-0863: Critical severity java development kit (jdk) vulnerability

Q: What is the severity of CVE-2011-0863?

CVE-2011-0863 is considered a critical vulnerability that affects the confidentiality, integrity, and availability of systems using vulnerable versions of Java Runtime Environment.

Q: How do I fix CVE-2011-0863?

To fix CVE-2011-0863, you should update your Java Runtime Environment to version 6 Update 26 or later.

Q: Which versions are affected by CVE-2011-0863?

CVE-2011-0863 affects Oracle Java SE 6 Update 25 and earlier versions.

Q: What types of applications are impacted by CVE-2011-0863?

CVE-2011-0863 impacts untrusted Java Web Start applications and untrusted Java applets running in the affected Java Runtime Environment.

Q: Is my system vulnerable to CVE-2011-0863?

If you are using Oracle Java SE 6 Update 25 or an earlier version, your system is vulnerable to CVE-2011-0863.

Published Jun 14, 2011

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected Software

48 affected components

Java Development Kit (JDK)<=1.6.0

Java Development Kit (JDK)=1.6.0

Java Development Kit (JDK)=1.6.0-update_10

Java Development Kit (JDK)=1.6.0-update_11

Java Development Kit (JDK)=1.6.0-update_12

Java Development Kit (JDK)=1.6.0-update_13

Java Development Kit (JDK)=1.6.0-update_14

Java Development Kit (JDK)=1.6.0-update_15

Java Development Kit (JDK)=1.6.0-update_16

Java Development Kit (JDK)=1.6.0-update_17

Java Development Kit (JDK)=1.6.0-update_18

Java Development Kit (JDK)=1.6.0-update_19

Java Development Kit (JDK)=1.6.0-update_20

Java Development Kit (JDK)=1.6.0-update_21

Java Development Kit (JDK)=1.6.0-update_22

Java Development Kit (JDK)=1.6.0-update_23

Java Development Kit (JDK)=1.6.0-update_24

Java Development Kit (JDK)=1.6.0-update_3

Java Development Kit (JDK)=1.6.0-update_4

Java Development Kit (JDK)=1.6.0-update_5

Java Development Kit (JDK)=1.6.0-update_6

Java Development Kit (JDK)=1.6.0-update_7

Java Development Kit (JDK)=1.6.0-update1

Java Development Kit (JDK)=1.6.0-update2

Sun Java Runtime Environment (JRE)<=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0-update_1

Sun Java Runtime Environment (JRE)=1.6.0-update_10

Sun Java Runtime Environment (JRE)=1.6.0-update_11

Sun Java Runtime Environment (JRE)=1.6.0-update_12

Sun Java Runtime Environment (JRE)=1.6.0-update_13

Sun Java Runtime Environment (JRE)=1.6.0-update_14

Sun Java Runtime Environment (JRE)=1.6.0-update_15

Sun Java Runtime Environment (JRE)=1.6.0-update_16

Sun Java Runtime Environment (JRE)=1.6.0-update_17

Sun Java Runtime Environment (JRE)=1.6.0-update_18

Sun Java Runtime Environment (JRE)=1.6.0-update_19

Sun Java Runtime Environment (JRE)=1.6.0-update_2

Sun Java Runtime Environment (JRE)=1.6.0-update_20

Sun Java Runtime Environment (JRE)=1.6.0-update_21

Sun Java Runtime Environment (JRE)=1.6.0-update_22

Sun Java Runtime Environment (JRE)=1.6.0-update_23

Sun Java Runtime Environment (JRE)=1.6.0-update_24

Sun Java Runtime Environment (JRE)=1.6.0-update_3

Sun Java Runtime Environment (JRE)=1.6.0-update_4

Sun Java Runtime Environment (JRE)=1.6.0-update_5

Sun Java Runtime Environment (JRE)=1.6.0-update_6

Sun Java Runtime Environment (JRE)=1.6.0-update_7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html

Event History

Jun 14, 2011

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0863?

CVE-2011-0863 is considered a critical vulnerability that affects the confidentiality, integrity, and availability of systems using vulnerable versions of Java Runtime Environment.

How do I fix CVE-2011-0863?