CVE-2015-2637: Medium severity oracle javafx vulnerability

Published Jul 15, 2015

Updated

Oracle Java SE 6u101, 7u85 and 8u51 fixes an unspecified vulnerability in the 2D component (CVE-2015-2637). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:P/I:N/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

— MITRE

Affected Software

11 affected components

ORACLE JavaFX=2.2.80

Oracle JDK=1.6.0-update95

Oracle JDK=1.7.0-update75

Oracle JDK=1.7.0-update80

Oracle JDK=1.8.0-update_33

Oracle JDK=1.8.0-update45

ORACLE JRE=1.6.0-update_95

ORACLE JRE=1.7.0-update_75

ORACLE JRE=1.7.0-update_80

ORACLE JRE=1.8.0-update_33

ORACLE JRE=1.8.0-update_45

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 15, 2015

Data Sourced

07:08 AM

DescriptionSeverityAffected Software

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2637?

CVE-2015-2637 has a CVSSv2 score of 5.0, indicating moderate severity.

What versions are affected by CVE-2015-2637?

CVE-2015-2637 affects Oracle Java SE versions 6u101, 7u85, and 8u51.

How do I fix CVE-2015-2637?

To fix CVE-2015-2637, update to the latest patched version of Oracle Java SE.

What component is impacted by CVE-2015-2637?

CVE-2015-2637 impacts the 2D component of Oracle Java SE.

Is there a workaround for CVE-2015-2637?

There is no known workaround for CVE-2015-2637; updating is the recommended action.