CVE-2011-3544: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
First published: Wed Oct 19 2011(Updated: )
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
Credit: secalert_us@oracle.com secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun JRE | =1.7.0 | |
| Sun JDK | =1.7.0 | |
| Sun JDK | =1.6.0-update_4 | |
| Sun JRE | =1.6.0-update_3 | |
| Sun JRE | =1.6.0-update_5 | |
| Sun JDK | =1.6.0-update_7 | |
| Sun JDK | =1.6.0-update_19 | |
| Sun JDK | =1.6.0-update_13 | |
| Sun JRE | =1.6.0-update_13 | |
| Sun JRE | =1.6.0-update_24 | |
| Sun JRE | =1.6.0-update_1 | |
| Sun JRE | =1.6.0-update_2 | |
| Sun JDK | =1.6.0-update_24 | |
| Sun JDK | =1.6.0-update_3 | |
| Sun JDK | =1.6.0-update_22 | |
| Sun JRE | =1.6.0-update_16 | |
| Sun JDK | =1.6.0-update_11 | |
| Sun JRE | =1.6.0-update_20 | |
| Sun JDK | =1.6.0-update_10 | |
| Sun JRE | =1.6.0-update_15 | |
| Sun JRE | =1.6.0-update_22 | |
| Sun JRE | <=1.6.0 | |
| Sun JRE | =1.6.0-update_6 | |
| Sun JDK | =1.6.0-update_14 | |
| Sun JDK | =1.6.0 | |
| Sun JDK | =1.6.0-update_17 | |
| Sun JRE | =1.6.0-update_19 | |
| Sun JRE | =1.6.0 | |
| Sun JDK | =1.6.0-update_5 | |
| Sun JRE | =1.6.0-update_18 | |
| Sun JDK | =1.6.0-update_23 | |
| Sun JDK | =1.6.0-update2 | |
| Sun JRE | =1.6.0-update_10 | |
| Sun JDK | =1.6.0-update_21 | |
| Sun JRE | =1.6.0-update_25 | |
| Sun JRE | =1.6.0-update_23 | |
| Sun JDK | =1.6.0-update_16 | |
| Sun JDK | =1.6.0-update1 | |
| Sun JRE | =1.6.0-update_17 | |
| Sun JDK | <=1.6.0 | |
| Sun JDK | =1.6.0-update_26 | |
| Sun JRE | =1.6.0-update_21 | |
| Sun JRE | =1.6.0-update_7 | |
| Sun JRE | =1.6.0-update_14 | |
| Sun JDK | =1.6.0-update_15 | |
| Sun JDK | =1.6.0-update_12 | |
| Sun JDK | =1.6.0-update_25 | |
| Sun JRE | =1.6.0-update_26 | |
| Sun JRE | =1.6.0-update_4 | |
| Sun JDK | =1.6.0-update_18 | |
| Sun JDK | =1.6.0-update_6 | |
| Sun JDK | =1.6.0-update_20 | |
| Sun JRE | =1.6.0-update_12 | |
| Sun JRE | =1.6.0-update_11 | |
| Oracle JDK | <1.6.0 | |
| Oracle JDK | =1.6.0 | |
| Oracle JDK | =1.6.0-update1 | |
| Oracle JDK | =1.6.0-update10 | |
| Oracle JDK | =1.6.0-update11 | |
| Oracle JDK | =1.6.0-update12 | |
| Oracle JDK | =1.6.0-update13 | |
| Oracle JDK | =1.6.0-update14 | |
| Oracle JDK | =1.6.0-update15 | |
| Oracle JDK | =1.6.0-update16 | |
| Oracle JDK | =1.6.0-update17 | |
| Oracle JDK | =1.6.0-update18 | |
| Oracle JDK | =1.6.0-update19 | |
| Oracle JDK | =1.6.0-update2 | |
| Oracle JDK | =1.6.0-update20 | |
| Oracle JDK | =1.6.0-update21 | |
| Oracle JDK | =1.6.0-update22 | |
| Oracle JDK | =1.6.0-update23 | |
| Oracle JDK | =1.6.0-update24 | |
| Oracle JDK | =1.6.0-update25 | |
| Oracle JDK | =1.6.0-update26 | |
| Oracle JDK | =1.7.0 | |
| Oracle JDK | =1.7.0-update1 | |
| Oracle JDK | =1.7.0-update10 | |
| Oracle JDK | =1.7.0-update11 | |
| Oracle JDK | =1.7.0-update13 | |
| Oracle JDK | =1.7.0-update15 | |
| Oracle JDK | =1.7.0-update17 | |
| Oracle JDK | =1.7.0-update2 | |
| Oracle JDK | =1.7.0-update21 | |
| Oracle JDK | =1.7.0-update25 | |
| Oracle JDK | =1.7.0-update3 | |
| Oracle JDK | =1.7.0-update4 | |
| Oracle JDK | =1.7.0-update5 | |
| Oracle JDK | =1.7.0-update6 | |
| Oracle JDK | =1.7.0-update7 | |
| Oracle JDK | =1.7.0-update7_b32 | |
| Oracle JDK | =1.7.0-update9 | |
| Oracle JDK | =1.7.0-update9_b31 | |
| Oracle JDK | =1.7.0-update9_b32 | |
| Oracle JRE | <1.6.0 | |
| Oracle JRE | =1.6.0 | |
| Oracle JRE | =1.6.0-update1 | |
| Oracle JRE | =1.6.0-update11 | |
| Oracle JRE | =1.6.0-update12 | |
| Oracle JRE | =1.6.0-update13 | |
| Oracle JRE | =1.6.0-update14 | |
| Oracle JRE | =1.6.0-update15 | |
| Oracle JRE | =1.6.0-update16 | |
| Oracle JRE | =1.6.0-update17 | |
| Oracle JRE | =1.6.0-update18 | |
| Oracle JRE | =1.6.0-update19 | |
| Oracle JRE | =1.6.0-update2 | |
| Oracle JRE | =1.6.0-update20 | |
| Oracle JRE | =1.6.0-update21 | |
| Oracle JRE | =1.6.0-update22 | |
| Oracle JRE | =1.6.0-update23 | |
| Oracle JRE | =1.6.0-update24 | |
| Oracle JRE | =1.6.0-update25 | |
| Oracle JRE | =1.6.0-update26 | |
| Oracle JRE | =1.6.0-update3 | |
| Oracle JRE | =1.6.0-update4 | |
| Oracle JRE | =1.6.0-update5 | |
| Oracle JRE | =1.6.0-update6 | |
| Oracle JRE | =1.6.0-update7 | |
| Oracle JRE | =1.6.0-update8 | |
| Oracle JRE | =1.6.0-update9 | |
| Oracle JRE | =1.7.0 | |
| Oracle JRE | =1.7.0-update1 | |
| Oracle JRE | =1.7.0-update10 | |
| Oracle JRE | =1.7.0-update10_b31 | |
| Oracle JRE | =1.7.0-update11 | |
| Oracle JRE | =1.7.0-update13 | |
| Oracle JRE | =1.7.0-update15 | |
| Oracle JRE | =1.7.0-update17 | |
| Oracle JRE | =1.7.0-update17_b31 | |
| Oracle JRE | =1.7.0-update17_b32 | |
| Oracle JRE | =1.7.0-update2 | |
| Oracle JRE | =1.7.0-update21 | |
| Oracle JRE | =1.7.0-update21_b31 | |
| Oracle JRE | =1.7.0-update25 | |
| Oracle JRE | =1.7.0-update25_b33 | |
| Oracle JRE | =1.7.0-update25_b34 | |
| Oracle JRE | =1.7.0-update25_b35 | |
| Oracle JRE | =1.7.0-update3 | |
| Oracle JRE | =1.7.0-update4 | |
| Oracle JRE | =1.7.0-update5 | |
| Oracle JRE | =1.7.0-update6 | |
| Oracle JRE | =1.7.0-update7 | |
| Oracle JRE | =1.7.0-update7_b32 | |
| Oracle JRE | =1.7.0-update9 | |
| Canonical Ubuntu Linux | =10.04 | |
| Canonical Ubuntu Linux | =10.10 | |
| Canonical Ubuntu Linux | =11.04 | |
| Canonical Ubuntu Linux | =11.10 | |
| Redhat Satellite With Embedded Oracle | =5.4 | |
| Suse Linux Enterprise Java | =10-sp4 | |
| SUSE Linux Enterprise Server | =10-sp4 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
- http://www.redhat.com/support/errata/RHSA-2011-1384.html
- http://www.securityfocus.com/bid/50218
- http://www.ibm.com/developerworks/java/jdk/alerts/
- http://marc.info/?l=bugtraq&m=132750579901589&w=2
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
- http://www.securitytracker.com/id?1026215
- http://rhn.redhat.com/errata/RHSA-2013-1455.html
- http://www.ubuntu.com/usn/USN-1263-1
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70849
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13947
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://secunia.com/advisories/48308
- https://nvd.nist.gov/vuln/detail/CVE-2011-3544
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/weakness
- agent/title
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/author
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/tags
- agent/softwarecombine
- agent/event
- collector/nvd-cve
- vendor/sun
- canonical/sun jre
- version/sun jre/1.7.0
- canonical/sun jdk
- version/sun jdk/1.7.0
- version/sun jdk/1.6.0-update_4
- version/sun jre/1.6.0-update_3
- version/sun jre/1.6.0-update_5
- version/sun jdk/1.6.0-update_7
- version/sun jdk/1.6.0-update_19
- version/sun jdk/1.6.0-update_13
- version/sun jre/1.6.0-update_13
- version/sun jre/1.6.0-update_24
- version/sun jre/1.6.0-update_1
- version/sun jre/1.6.0-update_2
- version/sun jdk/1.6.0-update_24
- version/sun jdk/1.6.0-update_3
- version/sun jdk/1.6.0-update_22
- version/sun jre/1.6.0-update_16
- version/sun jdk/1.6.0-update_11
- version/sun jre/1.6.0-update_20
- version/sun jdk/1.6.0-update_10
- version/sun jre/1.6.0-update_15
- version/sun jre/1.6.0-update_22
- version/sun jre/1.6.0
- version/sun jre/1.6.0-update_6
- version/sun jdk/1.6.0-update_14
- version/sun jdk/1.6.0
- version/sun jdk/1.6.0-update_17
- version/sun jre/1.6.0-update_19
- version/sun jdk/1.6.0-update_5
- version/sun jre/1.6.0-update_18
- version/sun jdk/1.6.0-update_23
- version/sun jdk/1.6.0-update2
- version/sun jre/1.6.0-update_10
- version/sun jdk/1.6.0-update_21
- version/sun jre/1.6.0-update_25
- version/sun jre/1.6.0-update_23
- version/sun jdk/1.6.0-update_16
- version/sun jdk/1.6.0-update1
- version/sun jre/1.6.0-update_17
- version/sun jdk/1.6.0-update_26
- version/sun jre/1.6.0-update_21
- version/sun jre/1.6.0-update_7
- version/sun jre/1.6.0-update_14
- version/sun jdk/1.6.0-update_15
- version/sun jdk/1.6.0-update_12
- version/sun jdk/1.6.0-update_25
- version/sun jre/1.6.0-update_26
- version/sun jre/1.6.0-update_4
- version/sun jdk/1.6.0-update_18
- version/sun jdk/1.6.0-update_6
- version/sun jdk/1.6.0-update_20
- version/sun jre/1.6.0-update_12
- version/sun jre/1.6.0-update_11
- vendor/oracle
- canonical/oracle jdk
- version/oracle jdk/1.6.0
- version/oracle jdk/1.6.0-update1
- version/oracle jdk/1.6.0-update10
- version/oracle jdk/1.6.0-update11
- version/oracle jdk/1.6.0-update12
- version/oracle jdk/1.6.0-update13
- version/oracle jdk/1.6.0-update14
- version/oracle jdk/1.6.0-update15
- version/oracle jdk/1.6.0-update16
- version/oracle jdk/1.6.0-update17
- version/oracle jdk/1.6.0-update18
- version/oracle jdk/1.6.0-update19
- version/oracle jdk/1.6.0-update2
- version/oracle jdk/1.6.0-update20
- version/oracle jdk/1.6.0-update21
- version/oracle jdk/1.6.0-update22
- version/oracle jdk/1.6.0-update23
- version/oracle jdk/1.6.0-update24
- version/oracle jdk/1.6.0-update25
- version/oracle jdk/1.6.0-update26
- version/oracle jdk/1.7.0
- version/oracle jdk/1.7.0-update1
- version/oracle jdk/1.7.0-update10
- version/oracle jdk/1.7.0-update11
- version/oracle jdk/1.7.0-update13
- version/oracle jdk/1.7.0-update15
- version/oracle jdk/1.7.0-update17
- version/oracle jdk/1.7.0-update2
- version/oracle jdk/1.7.0-update21
- version/oracle jdk/1.7.0-update25
- version/oracle jdk/1.7.0-update3
- version/oracle jdk/1.7.0-update4
- version/oracle jdk/1.7.0-update5
- version/oracle jdk/1.7.0-update6
- version/oracle jdk/1.7.0-update7
- version/oracle jdk/1.7.0-update7_b32
- version/oracle jdk/1.7.0-update9
- version/oracle jdk/1.7.0-update9_b31
- version/oracle jdk/1.7.0-update9_b32
- canonical/oracle jre
- version/oracle jre/1.6.0
- version/oracle jre/1.6.0-update1
- version/oracle jre/1.6.0-update11
- version/oracle jre/1.6.0-update12
- version/oracle jre/1.6.0-update13
- version/oracle jre/1.6.0-update14
- version/oracle jre/1.6.0-update15
- version/oracle jre/1.6.0-update16
- version/oracle jre/1.6.0-update17
- version/oracle jre/1.6.0-update18
- version/oracle jre/1.6.0-update19
- version/oracle jre/1.6.0-update2
- version/oracle jre/1.6.0-update20
- version/oracle jre/1.6.0-update21
- version/oracle jre/1.6.0-update22
- version/oracle jre/1.6.0-update23
- version/oracle jre/1.6.0-update24
- version/oracle jre/1.6.0-update25
- version/oracle jre/1.6.0-update26
- version/oracle jre/1.6.0-update3
- version/oracle jre/1.6.0-update4
- version/oracle jre/1.6.0-update5
- version/oracle jre/1.6.0-update6
- version/oracle jre/1.6.0-update7
- version/oracle jre/1.6.0-update8
- version/oracle jre/1.6.0-update9
- version/oracle jre/1.7.0
- version/oracle jre/1.7.0-update1
- version/oracle jre/1.7.0-update10
- version/oracle jre/1.7.0-update10_b31
- version/oracle jre/1.7.0-update11
- version/oracle jre/1.7.0-update13
- version/oracle jre/1.7.0-update15
- version/oracle jre/1.7.0-update17
- version/oracle jre/1.7.0-update17_b31
- version/oracle jre/1.7.0-update17_b32
- version/oracle jre/1.7.0-update2
- version/oracle jre/1.7.0-update21
- version/oracle jre/1.7.0-update21_b31
- version/oracle jre/1.7.0-update25
- version/oracle jre/1.7.0-update25_b33
- version/oracle jre/1.7.0-update25_b34
- version/oracle jre/1.7.0-update25_b35
- version/oracle jre/1.7.0-update3
- version/oracle jre/1.7.0-update4
- version/oracle jre/1.7.0-update5
- version/oracle jre/1.7.0-update6
- version/oracle jre/1.7.0-update7
- version/oracle jre/1.7.0-update7_b32
- version/oracle jre/1.7.0-update9
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/10.04
- version/canonical ubuntu linux/10.10
- version/canonical ubuntu linux/11.04
- version/canonical ubuntu linux/11.10
- vendor/redhat
- canonical/redhat satellite with embedded oracle
- version/redhat satellite with embedded oracle/5.4
- vendor/suse
- canonical/suse linux enterprise java
- version/suse linux enterprise java/10-sp4
- canonical/suse linux enterprise server
- version/suse linux enterprise server/10-sp4
- canonical/oracle java se jdk and jre