CVE-2015-0477: Medium severity oracle java se 7 vulnerability
It was discovered that the Beans component in OpenJDK incorrectly given permissions to code when loading resources. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions and request resources which should not be accessible.
Other sources
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0477?
CVE-2015-0477 has a high severity level due to the potential for remote attackers to compromise system integrity.
How do I fix CVE-2015-0477?
To fix CVE-2015-0477, update to the latest versions of Oracle Java SE or IcedTea as specified in the vulnerability details.
Which versions of software are affected by CVE-2015-0477?
CVE-2015-0477 affects Oracle Java SE versions 5.0u81, 6u91, 7u76, and 8u40, as well as IcedTea versions up to 1.13.7 and 2.5.5.
What types of attacks can CVE-2015-0477 enable?
CVE-2015-0477 can enable remote attackers to execute untrusted Java code and potentially compromise user permissions.
Is CVE-2015-0477 documented in any advisories?
Yes, CVE-2015-0477 is mentioned in various security advisories by organizations such as Mageia and OpenSUSE.