Test ID:	1.3.6.1.4.1.25623.1.0.804688
Category:	General
Title:	Oracle Java SE JRE Multiple Unspecified Vulnerabilities-02 (Jul 2014) - Windows
Summary:	Oracle Java SE JRE is prone to multiple unspecified vulnerabilities.
Description:	Summary: Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. Vulnerability Insight: Multiple unspecified flaws exist: - An error in the Security subcomponent related to the Elliptic Curve (EC) cryptography implementation. - An error in the Serviceability subcomponent related to share/native/sun/management/GcInfoBuilder.c - An error in the Libraries subcomponent related to share/classes/java/lang/invoke/MethodHandles.java - An unspecified error related to the Deployment subcomponent. - Two errors related to the Deployment subcomponent. - A format string error in the Hotspot subcomponent within the EventMark constructor and destructor in share/vm/utilities/events.cpp Vulnerability Impact: Successful exploitation will allow remote attackers to update, insert, or delete certain data, execute arbitrary code, conduct denial-of-service and disclose sensitive information. Affected Software/OS: Oracle Java SE 7 update 60 and prior, and 8 update 5 and prior on Windows. Solution: Apply the patch from the referenced advisory. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4264 BugTraq ID: 68612 http://www.securityfocus.com/bid/68612 Bugtraq: 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/534161/100/0/threaded Debian Security Information: DSA-2987 (Google Search) http://www.debian.org/security/2014/dsa-2987 http://seclists.org/fulldisclosure/2014/Dec/23 http://security.gentoo.org/glsa/glsa-201502-12.xml HPdes Security Advisory: HPSBUX03091 http://marc.info/?l=bugtraq&m=140852886808946&w=2 HPdes Security Advisory: SSRT101667 RedHat Security Advisories: RHSA-2014:0902 https://access.redhat.com/errata/RHSA-2014:0902 http://www.securitytracker.com/id/1030577 http://secunia.com/advisories/60326 http://secunia.com/advisories/60485 http://secunia.com/advisories/60812 http://secunia.com/advisories/60890 XForce ISS Database: oracle-cpujul2014-cve20144264(94603) https://exchange.xforce.ibmcloud.com/vulnerabilities/94603 Common Vulnerability Exposure (CVE) ID: CVE-2014-4266 BugTraq ID: 68596 http://www.securityfocus.com/bid/68596 Debian Security Information: DSA-2980 (Google Search) http://www.debian.org/security/2014/dsa-2980 http://secunia.com/advisories/59680 http://secunia.com/advisories/59924 http://secunia.com/advisories/59987 http://secunia.com/advisories/60081 http://secunia.com/advisories/60129 http://secunia.com/advisories/60317 http://secunia.com/advisories/60622 http://secunia.com/advisories/60817 http://secunia.com/advisories/61577 http://secunia.com/advisories/61640 SuSE Security Announcement: SUSE-SU-2015:0344 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html XForce ISS Database: oracle-cpujul2014-cve20144266(94601) https://exchange.xforce.ibmcloud.com/vulnerabilities/94601 Common Vulnerability Exposure (CVE) ID: CVE-2014-4221 BugTraq ID: 68571 http://www.securityfocus.com/bid/68571 XForce ISS Database: oracle-cpujul2014-cve20144221(94604) https://exchange.xforce.ibmcloud.com/vulnerabilities/94604 Common Vulnerability Exposure (CVE) ID: CVE-2014-4220 BugTraq ID: 68576 http://www.securityfocus.com/bid/68576 XForce ISS Database: oracle-cpujul2014-cve20144220(94598) https://exchange.xforce.ibmcloud.com/vulnerabilities/94598 Common Vulnerability Exposure (CVE) ID: CVE-2014-4208 BugTraq ID: 68580 http://www.securityfocus.com/bid/68580 http://secunia.com/advisories/61293 XForce ISS Database: oracle-cpujul2014-cve20144208(94607) https://exchange.xforce.ibmcloud.com/vulnerabilities/94607 Common Vulnerability Exposure (CVE) ID: CVE-2014-2490 BugTraq ID: 68645 http://www.securityfocus.com/bid/68645
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.