CVE-2016-3503: High severity oracle java se 7 vulnerability
Oracle Java SE 6u121, 7u111, and 8u101 fixes an unspecified vulnerability in the Install component (CVE-2016-3503). Upstream has CVSS scored this issue as: 7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
External Reference:
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA
Other sources
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2016-3503?
CVE-2016-3503 is rated with a CVSS score of 7.7, indicating a high severity vulnerability.
How do I fix CVE-2016-3503?
To fix CVE-2016-3503, you should upgrade to the latest patched versions of affected Java software.
Which versions of Java are affected by CVE-2016-3503?
Affected versions include Oracle Java SE 6u121, 7u111, and 8u101.
What is the impact of CVE-2016-3503?
CVE-2016-3503 can potentially allow unauthorized access to sensitive information through the Install component.
Is there a workaround for CVE-2016-3503?
There are no specific workarounds for CVE-2016-3503; applying patches is recommended.