First published: Wed Jan 21 2015(Updated: )
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ubuntu | =10.04 | |
Ubuntu | =12.04 | |
Ubuntu | =14.04 | |
Ubuntu | =14.10 | |
Debian | =7.0 | |
Debian | =8.0 | |
Fedora | =20 | |
Red Hat Enterprise Linux | =5 | |
Red Hat Enterprise Linux | =6.0 | |
Red Hat Enterprise Linux | =7.0 | |
Oracle JDK 6 | =1.5.0-update75 | |
Oracle JDK 6 | =1.6.0-update85 | |
Oracle JDK 6 | =1.7.0-update72 | |
Oracle JDK 6 | =1.8.0-update25 | |
Oracle Java Runtime Environment (JRE) | =1.5.0-update75 | |
Oracle Java Runtime Environment (JRE) | =1.6.0-update85 | |
Oracle Java Runtime Environment (JRE) | =1.7.0-update72 | |
Oracle Java Runtime Environment (JRE) | =1.8.0-update25 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0407 is classified as a medium to high severity vulnerability that affects the confidentiality of Oracle Java SE.
To fix CVE-2015-0407, update your Oracle Java SE installations to the latest version provided by Oracle.
CVE-2015-0407 affects Oracle Java SE versions 5.0u75, 6u85, 7u72, and 8u25.
CVE-2015-0407 impacts systems running vulnerable versions of Oracle Java SE on various distributions including Ubuntu, Debian, and Red Hat.
Yes, CVE-2015-0407 allows remote attackers to exploit the vulnerability through unknown vectors.