CVE-2015-4901: Critical severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2015-4901?

CVE-2015-4901 has a CVSSv2 score of 9.3, indicating it is a critical vulnerability.

Q: What components are affected by CVE-2015-4901?

CVE-2015-4901 specifically affects the JavaFX component of Oracle Java SE.

Q: How do I fix CVE-2015-4901?

To resolve CVE-2015-4901, upgrade to Oracle Java SE 8u65 or a later version.

Q: What systems are vulnerable to CVE-2015-4901?

CVE-2015-4901 impacts systems running Java JDK/JRE versions up to 1.8.0-update60.

Q: What are the potential impacts of CVE-2015-4901?

Exploitation of CVE-2015-4901 could lead to code execution and information disclosure.

Published Oct 20, 2015

Updated

Oracle Java SE 8u65 fixes an unspecified vulnerability in the JavaFX component (CVE-2015-4901). Upstream has CVSSv2 scored this issue as: 9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

Affected Software

4 affected componentsFixes available

redhat/java<1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7

1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7

redhat/java<1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1

1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1

Oracle JDK=1.8.0-update60

ORACLE JRE=1.8.0-update_60

Event History

Oct 20, 2015

CVE Published

12:00 AM

Oct 21, 2015

Data Sourced

12:14 PM

DescriptionSeverityAffected Software

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

RHSA-2015:1926

Frequently Asked Questions

What is the severity of CVE-2015-4901?

CVE-2015-4901 has a CVSSv2 score of 9.3, indicating it is a critical vulnerability.

What components are affected by CVE-2015-4901?