CVE-2016-3498: Medium severity oracle java se 7 vulnerability
Oracle Java SE 7u111 and 8u101 fixes an unspecified vulnerability in the JavaFX component (CVE-2016-3498). Upstream has CVSS scored this issue as: 5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
External Reference:
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA
Other sources
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2016-3498?
CVE-2016-3498 has a CVSS score of 5.3, which indicates a medium severity vulnerability.
How do I fix CVE-2016-3498?
To fix CVE-2016-3498, you should update your Oracle Java SE installations to version 1.7.0_111 or 1.8.0_101 or later.
What components are affected by CVE-2016-3498?
CVE-2016-3498 affects the JavaFX component in Oracle Java SE versions 7u111 and 8u101.
What versions of Java are impacted by CVE-2016-3498?
CVE-2016-3498 impacts Java versions 1.7.0_update101 and 1.8.0_update92 among others.
Is CVE-2016-3498 a remote code execution vulnerability?
CVE-2016-3498 does not specifically indicate a remote code execution vulnerability but it involves potential security risks in Java components.