Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-3544

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

Published

2011-10-19T21:55:01.097

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-noinfo
Type: Secondary
CWE-284

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oracle	jdk	< 1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.6.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jdk	1.7.0	Yes
Application	oracle	jre	< 1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.6.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Application	oracle	jre	1.7.0	Yes
Operating System	canonical	ubuntu_linux	10.04	Yes
Operating System	canonical	ubuntu_linux	10.10	Yes
Operating System	canonical	ubuntu_linux	11.04	Yes
Operating System	canonical	ubuntu_linux	11.10	Yes
Application	redhat	satellite_with_embedded_oracle	5.4	Yes
Operating System	suse	linux_enterprise_java	10	Yes
Operating System	suse	linux_enterprise_server	10	Yes

References

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html Mailing List, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=134254866602253&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-1455.html Third Party Advisory ([email protected])
http://secunia.com/advisories/48308 Broken Link ([email protected])
http://security.gentoo.org/glsa/glsa-201406-32.xml Third Party Advisory ([email protected])
http://www.ibm.com/developerworks/java/jdk/alerts/ Product ([email protected])
http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html Patch, Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2011-1384.html Broken Link ([email protected])
http://www.securityfocus.com/bid/50218 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1026215 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-1263-1 Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/70849 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13947 Broken Link ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=132750579901589&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=134254866602253&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=134254957702612&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2013-1455.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/48308 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-201406-32.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.ibm.com/developerworks/java/jdk/alerts/ Product (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2011-1384.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/50218 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1026215 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1263-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/70849 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13947 Broken Link (af854a3a-2127-422b-91ae-364da2661108)