CVE-2011-3544

CRITICAL9.8

CISA KEVHigh EPSS

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

Canonical / Ubuntu Linux10.04 – 10.04
Canonical / Ubuntu Linux10.10 – 10.10
Canonical / Ubuntu Linux11.04 – 11.04
Canonical / Ubuntu Linux11.10 – 11.10
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.6.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.7.0 – 1.7.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jdk1.6.0 – 1.6.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.6.0 – 1.6.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
oracle / jre1.7.0 – 1.7.0
RedHat / satellite_with_embedded_oracle5.4 – 5.4
SUSE / linux_enterprise_java10 – 10
SUSE / linux_enterprise_server10 – 10

References

MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13947
MISChttp://security.gentoo.org/glsa/glsa-201406-32.xml
MAILING_LISThttp://marc.info/?l=bugtraq&m=134254866602253&w=2
VENDOR_ADVISORYhttp://secunia.com/advisories/48308
MAILING_LISThttp://marc.info/?l=bugtraq&m=132750579901589&w=2
MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
MISChttp://rhn.redhat.com/errata/RHSA-2013-1455.html
MAILING_LISThttp://marc.info/?l=bugtraq&m=132750579901589&w=2
MISChttp://www.redhat.com/support/errata/RHSA-2011-1384.html
MISChttp://www.securityfocus.com/bid/50218
VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
MAILING_LISThttp://marc.info/?l=bugtraq&m=134254957702612&w=2
MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/70849
MISChttp://www.securitytracker.com/id?1026215
VENDOR_ADVISORYhttp://www.ubuntu.com/usn/USN-1263-1
MAILING_LISThttp://marc.info/?l=bugtraq&m=134254957702612&w=2
MISChttp://www.ibm.com/developerworks/java/jdk/alerts/