CVE-2015-4733: Critical severity oracle java se 7 vulnerability
It was discovered that the RemoteObjectInvocationHandler class in the RMI component of OpenJDK did not prevent calls to the finalize() method. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
The patch prevents calls of the finalize() method. It also makes it possible to re-enable support for calling the method via the sun.rmi.server.invocationhandler.allowFinalizeInvocation system property.
Other sources
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and ...
— Debian
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4733?
The severity of CVE-2015-4733 is critical.
How does CVE-2015-4733 affect Oracle Java SE?
CVE-2015-4733 affects Oracle Java SE versions 6u95, 7u80, and 8u45, as well as Java SE Embedded versions 7u75 and 8u33.
What is the impact of CVE-2015-4733?
CVE-2015-4733 can affect confidentiality, integrity, and availability of the system.
How can I mitigate the vulnerability in Oracle Java SE?
To mitigate the vulnerability in Oracle Java SE, it is recommended to apply the relevant security updates provided by Oracle or the respective Linux distributions.
Where can I find more information about CVE-2015-4733?
For more information about CVE-2015-4733, you can refer to the Oracle Security Advisory and the Red Hat Security Advisories linked in the references section.