First published: Fri Jan 15 2016(Updated: )
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ubuntu | =12.04 | |
Ubuntu | =14.04 | |
Ubuntu | =15.04 | |
Ubuntu | =15.10 | |
Oracle JDK 6 | =1.6.0-update105 | |
Oracle JDK 6 | =1.7.0-update91 | |
Oracle JDK 6 | =1.8.0-update66 | |
Oracle Java Runtime Environment (JRE) | =1.6.0-update105 | |
Oracle Java Runtime Environment (JRE) | =1.7.0-update91 | |
Oracle Java Runtime Environment (JRE) | =1.8.0-update66 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-0494 is rated as a critical vulnerability affecting confidentiality, integrity, and availability in certain Oracle Java SE versions.
To fix CVE-2016-0494, you should update your Oracle Java SE or JRE to the latest version available, which contains the necessary patches.
CVE-2016-0494 affects Oracle Java SE versions 6u105, 7u91, 8u66, and specific Ubuntu Linux distributions such as 12.04, 14.04, 15.04, and 15.10.
Yes, CVE-2016-0494 can be exploited remotely by attackers leveraging unknown vectors in the 2D component of Oracle Java.
CVE-2016-0494 impacts systems running Oracle Java SE or JRE, particularly those in certain versions of Ubuntu Linux.