CVE-2011-3571: Low severity oracle virtualization vulnerability
The AtomicReferenceArray class implementation did not properly check if the array is of an expected Object[] type. A malicious Java application or applet could use this flaw to cause Java Virtual Machine to crash or bypass Java sandbox restrictions.
Other sources
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3571?
CVE-2011-3571 has been classified as a vulnerability that could allow a malicious application to crash the Java Virtual Machine.
How do I fix CVE-2011-3571?
To fix CVE-2011-3571, ensure that you are using the latest version of Oracle Virtualization, as updates contain fixes for this vulnerability.
What impact does CVE-2011-3571 have on Java applications?
CVE-2011-3571 can lead to application crashes and potential bypass of Java sandbox restrictions, affecting application security.
Which versions of Oracle Virtualization are affected by CVE-2011-3571?
CVE-2011-3571 affects Oracle Virtualization version 3.2.
Can CVE-2011-3571 be exploited remotely?
Yes, a malicious Java application or applet exploiting CVE-2011-3571 could be delivered and executed remotely, leading to possible application crashes.