Oracle Java SE 6u71 and 7u51 fixes an unspecified vulnerability in the Deployment component (CVE-2014-0387). Upstream has CVSSv2 scored this issue as: 7.6/AV:N/AC:H/Au:N/C:C/I:C/A:C

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html#AppendixJAVA

Oracle Java SE 6u71 and 7u51 fixes an unspecified vulnerability in the Deployment component (CVE-2014-0424). Upstream has CVSSv2 scored this issue as: 7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html#AppendixJAVA

A flaw found in the way Security component in OpenJDK handled null xmlns (XML namespace) attributes when performing XML document canonicalization. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions.

A flaw was found in the way SNMP implementation in the Serviceability component in OpenJDK raised SnmpStatusException exception. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions.