CVE-2014-6492: High severity oracle java se 7 vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected Software

6 affected components

Oracle JDK=1.6.0-update81

Oracle JDK=1.8.0-update20

Oracle JRE=1.6.0-update_81

Oracle JRE=1.7.0-update_67

Oracle JRE=1.8.0-update_20

Mozilla Firefox

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6492?

CVE-2014-6492 is classified as a moderate severity vulnerability, affecting confidentiality, integrity, and availability.

How do I fix CVE-2014-6492?

To fix CVE-2014-6492, update Oracle Java SE to the latest version recommended by Oracle.

What software is affected by CVE-2014-6492?

CVE-2014-6492 affects Oracle JDK versions 1.6.0-update81, 1.7.0-update67, and 1.8.0-update20, as well as the Oracle JRE versions corresponding to those updates.

Can CVE-2014-6492 be exploited remotely?

Yes, CVE-2014-6492 allows remote attackers to exploit the vulnerability through unspecified vectors when running the affected Java versions on Firefox.

Does CVE-2014-6492 impact Firefox users?

Yes, users of Mozilla Firefox running the vulnerable versions of Oracle Java may experience the impacts related to CVE-2014-6492.