CVE-2015-0469: Buffer Overflow
An off-by-one error, leading to heap-based buffer overflow in the ICU Layout Engine ligature substitution processor. A check which was added as part of fix for CVE-2013-1569 (bug 952711) / CVE-2013-2383 (bug 952708) / CVE-2013-2384 (bug 952709) was found to contain an incorrect array boundary check. A specially crafted file could cause an application using ICU to parse untrusted font files to crash or, possibly, execute arbitrary code.
The original fix was added to OpenJDK and ICU via the following commits:
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7
http://bugs.icu-project.org/trac/changeset/33535 http://bugs.icu-project.org/trac/ticket/10107
ICU code is embedded the 2D component in OpenJDK and used by FontManager. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0469?
CVE-2015-0469 has a serious severity level due to its potential impact on confidentiality, integrity, and availability.
How do I fix CVE-2015-0469?
To mitigate CVE-2015-0469, upgrade to a patched version of IcedTea or the Oracle Java SE that is not susceptible to this vulnerability.
Which versions of Java are affected by CVE-2015-0469?
CVE-2015-0469 affects Oracle Java SE versions 5.0u81, 6u91, 7u76, and 8u40.
What type of vulnerability is CVE-2015-0469?
CVE-2015-0469 is characterized as a heap-based buffer overflow issue caused by an off-by-one error.
Can CVE-2015-0469 be exploited remotely?
Yes, CVE-2015-0469 can be exploited remotely by attackers through unspecified vectors.