CVE-2015-0459: Critical severity oracle java se 7 vulnerability

Published Apr 14, 2015

Updated

Oracle Java SE 5.0u85, 6u95, 7u79 and 8u45 fixes an unspecified vulnerability in the 2D component (CVE-2015-0459). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491.

— MITRE

Affected Software

11 affected components

Oracle JDK=1.5.0-update8

Oracle JDK=1.6.0-update91

Oracle JDK=1.7.0-update76

Oracle JDK=1.8.0-update40

Oracle JRE=1.5.0-update81

Oracle JRE=1.6.0-update91

Oracle JRE=1.7.0-update76

Oracle JRE=1.8.0-update40

Oracle JavaFX=2.2.76

Novell Suse Linux Enterprise Desktop=11.0-sp3

openSUSE openSUSE=13.2

Event History

Apr 14, 2015

Data Sourced

via Red Hat·08:30 PM

DescriptionSeverityAffected Software

Apr 16, 2015

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0459?

CVE-2015-0459 has a CVSSv2 score of 10.0, indicating it is critical in severity.

How do I fix CVE-2015-0459?

To fix CVE-2015-0459, upgrade to the latest version of Oracle Java SE or apply the recommended patches.

What versions are affected by CVE-2015-0459?

CVE-2015-0459 affects Oracle Java SE versions 5.0u85, 6u95, 7u79, and 8u45.

What component is vulnerable in CVE-2015-0459?

The vulnerability in CVE-2015-0459 is located in the 2D component of Oracle Java SE.

Is CVE-2015-0459 remotely exploitable?

Yes, CVE-2015-0459 is classified as having remote exploitability.