CVE-2015-2632: Integer Overflow
An integer overflow flaw, leading to out-of-bounds read, was found in the LETableReference's verifyLength() method. A specially crafted file could cause an application using ICU to parse untrusted font files to perform an invalid memory access, leading to crash and possibly disclosure of portion of application memory.
ICU code is embedded the 2D component in OpenJDK and used by FontManager. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this Oracle Java SE vulnerability?
The vulnerability ID for this Oracle Java SE vulnerability is CVE-2015-2632.
What software versions are affected by this vulnerability?
Oracle Java SE 6u95, 7u80, and 8u45 are affected by this vulnerability.
How can this vulnerability affect confidentiality?
This vulnerability can affect confidentiality through unknown vectors related to 2D.
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [Oracle](http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA), [Red Hat](https://rhn.redhat.com/errata/RHSA-2015-1230.html), [Red Hat](https://rhn.redhat.com/errata/RHSA-2015-1229.html).