CVE-2016-5573: High severity oracle java se 7 vulnerability
It was discovered that the Hotspot component of OpenJDK did not properly check Java Debug Wire Protocol (JDWP) packets, which could possibly allow HTTP requests issues by a web browser to be interpreted as valid JDWP messages. An attacker could possibly use this flaw to send debugging commands to a Java program or applet running with debugging enabled if they could make victim's browser send HTTP requests to the JDWP port of the debugged application.
Other sources
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5573?
CVE-2016-5573 has a severity rating that indicates it poses a risk of remote code execution under certain circumstances.
How do I fix CVE-2016-5573?
To fix CVE-2016-5573, update to an affected version of OpenJDK or apply the appropriate security patches provided by Oracle.
Which software versions are affected by CVE-2016-5573?
CVE-2016-5573 affects Oracle JDK and JRE versions 1.6.0-update121, 1.7.0-update111, and 1.8.0-update101 and 1.8.0-update102.
What are the potential exploits of CVE-2016-5573?
An attacker could exploit CVE-2016-5573 to send malicious commands via the Java Debug Wire Protocol, allowing them to control the affected system.
Is there a public exploit available for CVE-2016-5573?
As of the latest information, there are no known public exploits specifically targeting CVE-2016-5573.