CVE-2015-2619: Medium severity oracle javafx vulnerability

Published Jul 15, 2015

Updated

Oracle Java SE 7u85 and 8u51 fixes an unspecified vulnerability in the 2D component (CVE-2015-2619). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:P/I:N/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

— MITRE

Affected Software

9 affected components

ORACLE JavaFX=2.2.80

Oracle JDK=1.7.0-update75

Oracle JDK=1.7.0-update80

Oracle JDK=1.8.0-update_33

Oracle JDK=1.8.0-update45

ORACLE JRE=1.7.0-update_75

ORACLE JRE=1.7.0-update_80

ORACLE JRE=1.8.0-update_33

ORACLE JRE=1.8.0-update_45

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 15, 2015

Data Sourced

07:07 AM

DescriptionSeverityAffected Software

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2619?

CVE-2015-2619 has a CVSSv2 score of 5.0, indicating a medium severity level.

How do I fix CVE-2015-2619?

To fix CVE-2015-2619, update to the latest version of Oracle Java SE 7u85 or 8u51, which includes the necessary patches.

Which Oracle products are affected by CVE-2015-2619?

CVE-2015-2619 affects Oracle JavaFX version 2.2.80, as well as specific updates of Oracle JDK and JRE versions.

What components are vulnerable in CVE-2015-2619?

CVE-2015-2619 is related to an unspecified vulnerability within the 2D component of Oracle Java.

Is CVE-2015-2619 an exploitable vulnerability?

CVE-2015-2619 could potentially be exploited, as it pertains to vulnerabilities within a widely used Java component.