Test ID:	1.3.6.1.4.1.25623.1.0.805263
Category:	General
Title:	Oracle Java SE JRE Multiple Unspecified Vulnerabilities-01 (Feb 2015) - Windows
Summary:	Oracle Java SE JRE is prone to multiple unspecified vulnerabilities.
Description:	Summary: Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. Vulnerability Insight: Multiple unspecified flaws exist due to: - An error in the Hotspot JVM compiler related to code optimization. - An error in the Install component. - An error in the 'java.lang.ClassLoader getParent' function related to an improper permission check. Vulnerability Impact: Successful exploitation will allow attackers to gain escalated privileges, bypass sandbox restrictions and execute arbitrary code. Affected Software/OS: Oracle Java SE 8 update 25 and prior on Windows. Solution: Apply the patch from the referenced advisory. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0437 BugTraq ID: 72146 http://www.securityfocus.com/bid/72146 https://security.gentoo.org/glsa/201603-11 RedHat Security Advisories: RHSA-2015:0080 http://rhn.redhat.com/errata/RHSA-2015-0080.html http://www.securitytracker.com/id/1031580 SuSE Security Announcement: SUSE-SU-2015:0336 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html XForce ISS Database: oracle-cpujan2015-cve20150437(100144) https://exchange.xforce.ibmcloud.com/vulnerabilities/100144 Common Vulnerability Exposure (CVE) ID: CVE-2015-0421 BugTraq ID: 72150 http://www.securityfocus.com/bid/72150 https://security.gentoo.org/glsa/201507-14 XForce ISS Database: oracle-cpujan2015-cve20150421(100146) https://exchange.xforce.ibmcloud.com/vulnerabilities/100146 Common Vulnerability Exposure (CVE) ID: CVE-2014-6549 BugTraq ID: 72137 http://www.securityfocus.com/bid/72137
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.