CVE-2015-0484: Medium severity oracle java se 7 vulnerability

Published Apr 14, 2015

Updated

Oracle Java SE 7u79 and 8u45 fixes an unspecified vulnerability in the JavaFX component (CVE-2015-0484). Upstream has CVSSv2 scored this issue as: 6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492.

— MITRE

Affected Software

7 affected components

Oracle JDK=1.7.0-update76

Oracle JDK=1.8.0-update40

Oracle JRE=1.7.0-update76

Oracle JRE=1.8.0-update40

Oracle JavaFX=2.2.76

openSUSE openSUSE=13.2

SUSE Linux Enterprise Server=11-sp3

Event History

Apr 14, 2015

Data Sourced

via Red Hat·08:32 PM

DescriptionSeverityAffected Software

Apr 16, 2015

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0484?

CVE-2015-0484 has a CVSSv2 score of 6.8, indicating a medium severity vulnerability.

How do I fix CVE-2015-0484?

To mitigate CVE-2015-0484, upgrade to the latest versions of Oracle Java SE and JavaFX as specified by Oracle.

Which software versions are affected by CVE-2015-0484?

CVE-2015-0484 affects Oracle JDK 7u76, Oracle JDK 8u40, and specific versions of Oracle JavaFX.

Is CVE-2015-0484 an exploit that requires authentication?

No, CVE-2015-0484 can be exploited without authentication.

What components of the Java platform are impacted by CVE-2015-0484?

CVE-2015-0484 impacts the JavaFX component of Oracle's Java Runtime Environment.