CVE-2014-2490: Critical severity hpe hp-ux vulnerability
It was discovered that the event logger contains a format string error. An untrusted Java application or applet could possibly use this flaw to cause the Java Virtual Machine to crash, or, potentially, execute arbitrary code with the privileges of the Java Virtual Machine.
Other sources
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2490?
CVE-2014-2490 has a high severity rating due to the possibility of crashing the Java Virtual Machine or executing arbitrary code.
How do I fix CVE-2014-2490?
To fix CVE-2014-2490, ensure that you update to the latest version of the affected software, including the latest patches provided by the vendor.
Which software is affected by CVE-2014-2490?
CVE-2014-2490 affects specific versions of HP-UX, Debian Linux, and Oracle JDK and JRE.
What kind of impact can CVE-2014-2490 cause?
CVE-2014-2490 can lead to a denial of service or potential unauthorized access due to code execution vulnerabilities.
Is there a workaround for CVE-2014-2490?
There are no known effective workarounds for CVE-2014-2490; the recommended method is to update the software promptly.