CVE-2014-4221: Medium severity Oracle JDK vulnerability
It was discovered that MethodHandles.Lookup did not properly check for "protected" modifier, making it possible to access protected constructors in a different package. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4221?
CVE-2014-4221 is classified as a high severity vulnerability due to its potential to bypass Java sandbox restrictions.
How do I fix CVE-2014-4221?
To fix CVE-2014-4221, update to the latest version of Oracle JDK or JRE that addresses this vulnerability.
Which versions are affected by CVE-2014-4221?
CVE-2014-4221 affects Oracle JDK 1.7.0-update60 and 1.8.0-update5, as well as corresponding JRE versions.
What type of applications are impacted by CVE-2014-4221?
CVE-2014-4221 can impact untrusted Java applications or applets that attempt to access protected constructors across packages.
What implications does CVE-2014-4221 have for security?
CVE-2014-4221 can lead to unauthorized access and manipulation of protected resources, undermining the security model of Java.