CVE-2016-3610: Critical severity oracle java se 7 vulnerability
It was discovered that the filterReturnValue() method of the MethodHandles in the Libraries component of OpenJDK did not properly check filter MethodHandle parameter count. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3610?
CVE-2016-3610 is categorized as a medium severity vulnerability.
How do I fix CVE-2016-3610?
To fix CVE-2016-3610, update to the latest version of the affected JDK or JRE as provided by Oracle.
Which software is affected by CVE-2016-3610?
CVE-2016-3610 affects Oracle JDK versions 1.8.0-update91 and 1.8.0-update92, and Oracle JRE versions 1.8.0-update91 and 1.8.0-update92.
What type of vulnerability is CVE-2016-3610?
CVE-2016-3610 is a security vulnerability that allows untrusted Java applications to bypass sandbox restrictions.
What could be the consequences of CVE-2016-3610?
If exploited, CVE-2016-3610 could allow an untrusted application to execute arbitrary code on the host system.