Oracle Java SE CVE-2014-4220 Remote Security Vulnerability
BID:68576
Info
Oracle Java SE CVE-2014-4220 Remote Security Vulnerability
| Bugtraq ID: | 68576 |
| Class: | Unknown |
| CVE: |
CVE-2014-4220 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 15 2014 12:00AM |
| Updated: | Apr 13 2015 09:32PM |
| Credit: | Oracle |
| Vulnerable: |
SuSE Suse Linux Enterprise Desktop 11 Sun JRE (Windows Production Release) 1.7 Sun JRE (Solaris Production Release) 1.7 Sun JRE (Linux Production Release) 1.7 Redhat Enterprise Linux Workstation Supplementary 7 Redhat Enterprise Linux Workstation Supplementary 6 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Server Supplementary 7 Redhat Enterprise Linux Server Supplementary 6 Redhat Enterprise Linux HPC Node Supplementary 7 Redhat Enterprise Linux HPC Node Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 7 Redhat Enterprise Linux Desktop Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 5 client Oracle JRE(Windows Production Release) 1.8 Oracle JRE(Windows Production Release) 1.8.0:update_5 Oracle JRE(Windows Production Release) 1.7.0_9 Oracle JRE(Windows Production Release) 1.7.0_8 Oracle JRE(Windows Production Release) 1.7.0_51 Oracle JRE(Windows Production Release) 1.7.0_45 Oracle JRE(Windows Production Release) 1.7.0_17 Oracle JRE(Windows Production Release) 1.7.0_13 Oracle JRE(Windows Production Release) 1.7.0_12 Oracle JRE(Windows Production Release) 1.7.0_11 Oracle JRE(Windows Production Release) 1.7.0_10 Oracle JRE(Windows Production Release) 1.7.0:update_60 Oracle JRE(Solaris Production Release) 1.8 Oracle JRE(Solaris Production Release) 1.8.0:update_5 Oracle JRE(Solaris Production Release) 1.7.0_9 Oracle JRE(Solaris Production Release) 1.7.0_8 Oracle JRE(Solaris Production Release) 1.7.0_51 Oracle JRE(Solaris Production Release) 1.7.0_45 Oracle JRE(Solaris Production Release) 1.7.0_40 Oracle JRE(Solaris Production Release) 1.7.0_17 Oracle JRE(Solaris Production Release) 1.7.0_13 Oracle JRE(Solaris Production Release) 1.7.0_11 Oracle JRE(Solaris Production Release) 1.7.0_10 Oracle JRE(Solaris Production Release) 1.7.0:update_60 Oracle JRE(Linux Production Release) 1.8.0:update_5 Oracle JRE(Linux Production Release) 1.8.0 Oracle JRE(Linux Production Release) 1.7.0_9 Oracle JRE(Linux Production Release) 1.7.0_8 Oracle JRE(Linux Production Release) 1.7.0_51 Oracle JRE(Linux Production Release) 1.7.0_45 Oracle JRE(Linux Production Release) 1.7.0_40 Oracle JRE(Linux Production Release) 1.7.0_17 Oracle JRE(Linux Production Release) 1.7.0_11 Oracle JRE(Linux Production Release) 1.7.0_10 Oracle JRE(Linux Production Release) 1.7.0:update_60 Oracle JRE (Windows Production Release) 1.7.0_7 Oracle JRE (Windows Production Release) 1.7.0_40 Oracle JRE (Windows Production Release) 1.7.0_4 Oracle JRE (Windows Production Release) 1.7.0_21 Oracle JRE (Windows Production Release) 1.7.0_2 Oracle JRE (Solaris Production Release) 1.7.0_7 Oracle JRE (Solaris Production Release) 1.7.0_4 Oracle JRE (Solaris Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_7 Oracle JRE (Linux Production Release) 1.7.0_4 Oracle JRE (Linux Production Release) 1.7.0_21 Oracle JRE (Linux Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_13 Oracle JRE (Linux Production Release) 1.7.0_12 Oracle JDK(Windows Production Release) 1.8 Oracle JDK(Windows Production Release) 1.8.0:update_5 Oracle JDK(Windows Production Release) 1.7.0_9 Oracle JDK(Windows Production Release) 1.7.0_8 Oracle JDK(Windows Production Release) 1.7.0_51 Oracle JDK(Windows Production Release) 1.7.0_45 Oracle JDK(Windows Production Release) 1.7.0_21 Oracle JDK(Windows Production Release) 1.7.0_17 Oracle JDK(Windows Production Release) 1.7.0_13 Oracle JDK(Windows Production Release) 1.7.0_12 Oracle JDK(Windows Production Release) 1.7.0_11 Oracle JDK(Windows Production Release) 1.7.0_10 Oracle JDK(Windows Production Release) 1.7.0:update_60 Oracle JDK(Solaris Production Release) 1.8 Oracle JDK(Solaris Production Release) 1.8.0:update_5 Oracle JDK(Solaris Production Release) 1.7.0_9 Oracle JDK(Solaris Production Release) 1.7.0_8 Oracle JDK(Solaris Production Release) 1.7.0_51 Oracle JDK(Solaris Production Release) 1.7.0_45 Oracle JDK(Solaris Production Release) 1.7.0_40 Oracle JDK(Solaris Production Release) 1.7.0_21 Oracle JDK(Solaris Production Release) 1.7.0_13 Oracle JDK(Solaris Production Release) 1.7.0_12 Oracle JDK(Solaris Production Release) 1.7.0:update_60 Oracle JDK(Linux Production Release) 1.8.0:update_5 Oracle JDK(Linux Production Release) 1.8.0 Oracle JDK(Linux Production Release) 1.7.0_9 Oracle JDK(Linux Production Release) 1.7.0_8 Oracle JDK(Linux Production Release) 1.7.0_51 Oracle JDK(Linux Production Release) 1.7.0_45 Oracle JDK(Linux Production Release) 1.7.0_40 Oracle JDK(Linux Production Release) 1.7.0_21 Oracle JDK(Linux Production Release) 1.7.0_17 Oracle JDK(Linux Production Release) 1.7.0_11 Oracle JDK(Linux Production Release) 1.7.0_10 Oracle JDK(Linux Production Release) 1.7.0:update_60 Oracle JDK(Linux Production Release) 1.6.0_43 Oracle JDK (Windows Production Release) 1.7 Oracle JDK (Windows Production Release) 1.7.0_7 Oracle JDK (Windows Production Release) 1.7.0_40 Oracle JDK (Windows Production Release) 1.7.0_4 Oracle JDK (Windows Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7 Oracle JDK (Solaris Production Release) 1.7.0_7 Oracle JDK (Solaris Production Release) 1.7.0_4 Oracle JDK (Solaris Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7.0_11 Oracle JDK (Solaris Production Release) 1.7.0_10 Oracle JDK (Linux Production Release) 1.7 Oracle JDK (Linux Production Release) 1.7.0_7 Oracle JDK (Linux Production Release) 1.7.0_4 Oracle JDK (Linux Production Release) 1.7.0_2 Oracle JDK (Linux Production Release) 1.7.0_13 Oracle JDK (Linux Production Release) 1.7.0_12 IBM WebSphere Real Time 3 SR7 IBM WebSphere Message Broker 8.0 IBM WebSphere Message Broker 7.0 IBM Vios 2.2.3 IBM Vios 2.2.1 4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.5 IBM Vios 2.2.2.0 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM TRIRIGA for Energy Optimization 1.1 IBM Tivoli System Automation for Integrated Operations Management 2.1.1 IBM Tivoli System Automation for Integrated Operations Management 2.1 IBM Tivoli Storage Productivity Center 5.2.2 IBM Tivoli Storage Productivity Center 5.2.1 0 IBM Tivoli Storage Productivity Center 5.2 IBM Tivoli Storage Productivity Center 5.1.1 3 IBM Tivoli Storage Productivity Center 5.1.1 IBM Tivoli Storage Productivity Center 5.1 IBM Tivoli Storage Productivity Center 4.2.2 143 IBM Tivoli Storage Productivity Center 4.2.2 IBM Tivoli Storage Productivity Center 5.2.3 IBM Tivoli Storage Productivity Center 5.2.1.1 IBM Tivoli Storage Productivity Center 5.1.1.5 IBM Tivoli Storage Productivity Center 5.1.1.4 IBM Tivoli Storage Productivity Center 5.1.1.2 IBM Tivoli Storage Productivity Center 5.1.1.1 IBM Tivoli Storage Productivity Center 5.1.1.0 IBM Tivoli Storage Productivity Center 4.2.2.184 IBM Tivoli Storage Productivity Center 4.2.2.178 IBM Tivoli Storage Productivity Center 4.2.2.177 IBM Tivoli Storage Productivity Center 4.2.2.145 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Storage Productivity Center 4.2.0 IBM Tivoli Service Request Manager 7.5 IBM Tivoli Service Request Manager 7.2.2 IBM Tivoli Service Request Manager 7.2.1.2 IBM Tivoli Service Request Manager 7.2.1.0 IBM Tivoli Service Request Manager 7.2.0.1 IBM Tivoli Service Request Manager 7.2.0.0 IBM Tivoli Service Request Manager 7.1.1 IBM Tivoli Monitoring 6.3 IBM Tivoli Monitoring 6.2.3 IBM Tivoli Monitoring 6.2.2 IBM Tivoli Monitoring 6.2.1 IBM Tivoli Monitoring 6.2.0 IBM Tivoli Endpoint Manager for Remote Control 8.2.1 IBM Tivoli Composite Application Manager for Transactions 7.4 IBM Tivoli Composite Application Manager for Transactions 7.3.0 IBM Tivoli Composite Application Manager for Transactions 7.2.0 IBM Tivoli Composite Application Manager for Transactions 7.1.0 IBM Tivoli Change And Configuration Management Database 7.1.1 IBM Tivoli Change And Configuration Management Database 7.5 IBM Tivoli Asset Management for IT 7.2.1 2 IBM Tivoli Asset Management for IT 7.1.1 IBM Tivoli Asset Management for IT 7.5 IBM Tivoli Asset Management for IT 7.2.2 IBM Tivoli Asset Management for IT 7.2.1.0 IBM Tivoli Asset Management for IT 7.2.0.1 IBM Tivoli Application Dependency Discovery Manager 7.2.2 1 IBM Tivoli Application Dependency Discovery Manager 7.2.1 3 IBM Tivoli Application Dependency Discovery Manager 7.2.1 2 IBM Tivoli Application Dependency Discovery Manager 7.2.1 1 IBM Tivoli Application Dependency Discovery Manager 7.2.1 IBM Tivoli Application Dependency Discovery Manager 7.2.2.2 IBM Tivoli Application Dependency Discovery Manager 7.2.2.0 IBM Tivoli Application Dependency Discovery Manager 7.2.1.6 IBM Tivoli Application Dependency Discovery Manager 7.2.1.5 IBM Tivoli Application Dependency Discovery Manager 7.2.1.4 IBM Tivoli Application Dependency Discovery Manager 7.2.0.8 IBM Tivoli Application Dependency Discovery Manager 7.2.0.7 IBM Tivoli Application Dependency Discovery Manager 7.2.0.6 IBM Tivoli Application Dependency Discovery Manager 7.2.0.5 IBM Tivoli Application Dependency Discovery Manager 7.2.0.4 IBM Tivoli Application Dependency Discovery Manager 7.2.0.3 IBM Tivoli Application Dependency Discovery Manager 7.2.0.2 IBM Tivoli Application Dependency Discovery Manager 7.2.0.10 IBM Tivoli Application Dependency Discovery Manager 7.2.0.1 IBM Tivoli Application Dependency Discovery Manager 7.2.0 IBM Smart Analytics System 5600 V3 9.7 IBM Smart Analytics System 5600 V3 10.1 IBM Smart Analytics System 5600 V2 9.7 IBM Smart Analytics System 5600 V2 10.1 IBM Smart Analytics System 5600 V1 9.7 IBM Smart Analytics System 5600 V1 10.1 IBM Maximo for Utilities 7.1.1 IBM Maximo for Utilities 7.5 IBM Maximo for Transportation 7.1.1 IBM Maximo for Transportation 7.5 IBM Maximo for Oil and Gas 7.1.1 IBM Maximo for Nuclear Power 7.1.1 IBM Maximo for Nuclear Power 7.5 IBM Maximo for Life Sciences 7.1.1 IBM Maximo for Life Sciences 7.5 IBM Maximo for Government 7.1.1 IBM Maximo for Government 7.5 IBM Maximo Asset Management for Energy Optimization 7.1.1 IBM Maximo Asset Management for Energy Optimization 7.5 IBM Maximo Asset Management Essentials 7.5 IBM Maximo Asset Management 7.1.1 IBM Maximo Asset Management 7.5 IBM Lotus Domino 9.0.1.0 IBM Lotus Domino 8.5.3.6 IBM Lotus Domino 8.5.3.5 IBM Java SDK 7R1 SR1 IBM Java SDK 7 SR7 IBM Java SDK 7 SR4 IBM Java SDK 7 SR3 IBM Java SDK 7 SR2 IBM Java SDK 7 SR1 IBM Java SDK 7 IBM Java SDK 6R1 SR8 IBM Java SDK 6 SR16 IBM Java SDK 6 SR14 IBM Java SDK 6 SR13 IBM Java SDK 6 SR12 IBM Java SDK 6 SR11 IBM Java SDK 6 SR10 IBM Java SDK 5.0 SR16-FP6 IBM Java SDK 5.0 SR16-FP3 IBM Java SDK 5.0 SR16-FP2 IBM Java SDK 5.0 SR16-FP1 IBM Java SDK 5.0 SR16 IBM Java SDK 5.0 SR15 IBM Java SDK 5 SR15 IBM Integration Bus 9.0.0.0 IBM i 7.2 IBM i 7.1 IBM i 6.1 IBM Endpoint Manager for Remote Control 9.1.0 IBM Cognos Business Viewpoint 10.1.1 FP2 IBM Cognos Business Viewpoint 10.1.1 FP1 IBM Cognos Business Viewpoint 10.1 FP1 IBM CICS Transaction Gateway 9.1 IBM CICS Transaction Gateway 9.0 IBM CICS Transaction Gateway 8.1 IBM CICS Transaction Gateway 8.0 IBM CICS Transaction Gateway 7.2 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 HP HP-UX B.11.31 HP HP-UX B.11.23 Gentoo Linux EMC RSA Archer GRC 5.5 SP1 EMC RSA Archer GRC 5.5 EMC RSA Archer GRC 5.4 SP1 P3 EMC RSA Archer GRC 5.4 SP1 P2 EMC RSA Archer GRC 5.4 SP1 P1 EMC RSA Archer GRC 5.4 SP1 EMC RSA Archer GRC 5.4 P2 EMC RSA Archer GRC 5.4 EMC RSA Archer GRC 5.3SP1 EMC RSA Archer GRC 5.3 EMC RSA Archer GRC 5.2SP1 EMC RSA Archer GRC 5.2 EMC RSA Archer GRC 5.0 Avaya Proactive Contact 5.1 Avaya Proactive Contact 5.0 Avaya Meeting Exchange 6.2 Avaya Meeting Exchange 6.0 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya IQ 4.0 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Application Server 9.0 SP 2 Avaya IP Office Application Server 9.0 SP 1 Avaya IP Office Application Server 9.0 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya CMS R17ac.h Avaya CMS R17ac.g Avaya Call Management System R17.0 Avaya Call Management System R16.3eg.f Avaya Call Management System R16.3eg.e Avaya Call Management System R16.3eg.b Avaya Call Management System R16.3 Avaya Call Management System R16.2 Avaya Call Management System R16.1 Avaya Call Management System R 16.0 Avaya Call Management System R 16 Avaya Aura System Platform 6.2.2 Avaya Aura System Platform 6.2.1 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.3 Avaya Aura System Platform 6.2.1.0.9 Avaya Aura System Platform 6.2 SP1 Avaya Aura System Platform 6.2 Avaya Aura System Platform 6.0.3.9.3 Avaya Aura System Platform 6.0.3.8.3 Avaya Aura System Platform 6.0.3.0.3 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Manager 6.3.6 Avaya Aura System Manager 6.3.4 Avaya Aura System Manager 6.3.2 Avaya Aura System Manager 6.3.1 Avaya Aura System Manager 6.3.3 Avaya Aura System Manager 6.3 Avaya Aura System Manager 6.2.4 Avaya Aura System Manager 6.2.3 Avaya Aura System Manager 6.2 SP3 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.7 Avaya Aura System Manager 6.1.5 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura System Manager 5.2 Avaya Aura System Manager 5.0 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.1.5 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.0.1 Avaya Aura Session Manager 6.3.3 Avaya Aura Session Manager 6.3 Avaya Aura Session Manager 6.2.4 Avaya Aura Session Manager 6.2.3 Avaya Aura Session Manager 6.2.2 Avaya Aura Session Manager 6.2 SP1 Avaya Aura Session Manager 6.2 Avaya Aura Session Manager 6.1.7 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0.2 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2.4 Avaya Aura Session Manager 5.2.1 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 5.0 Avaya Aura Presence Services 6.1.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.1 SP1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Messaging 6.1.1 Avaya Aura Messaging 6.3 Avaya Aura Messaging 6.2 SP4 Avaya Aura Messaging 6.2 Avaya Aura Messaging 6.1 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 6.0.2 Avaya Aura Experience Portal 6.0.1 Avaya Aura Experience Portal 7.0 Avaya Aura Experience Portal 6.0 SP2 Avaya Aura Experience Portal 6.0 SP1 Avaya Aura Experience Portal 6.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 7.2 Avaya Aura Conferencing 7.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Communication Manager 5.2.1 SP5 Avaya Aura Communication Manager 5.2 Avaya Aura Communication Manager 5.2.1 SSP3 Avaya Aura Communication Manager 5.2.1 SSP2 Avaya Aura Communication Manager 5.2.1 SSP1 Avaya Aura Communication Manager 5.2.1 SP4 Avaya Aura Communication Manager 5.2.1 SP2 Avaya Aura Communication Manager 5.2 Avaya Aura Collaboration Environment 2.0 Avaya Aura Application Server 5300 SIP Core 3.0 Avaya Aura Application Server 5300 SIP Core 2.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 6.3 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.1.2 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 6.0 Avaya Aura Application Enablement Services 5.2.4 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2 Avaya Aura Application Enablement Services 5.0 |
| Not Vulnerable: |
IBM Tivoli Storage Productivity Center 5.2.4 IBM Tivoli Storage Productivity Center 5.1.1.6 IBM Tivoli Storage Productivity Center 4.2.2.191 EMC RSA Archer GRC 5.5.1.1 |
Discussion
Oracle Java SE CVE-2014-4220 Remote Security Vulnerability
Oracle Java SE is prone to a remote vulnerability.
The vulnerability can be exploited over multiple protocols. This issue affects the 'Deployment' sub-component.
This vulnerability affects the following supported versions:
Java SE 7u60, Java SE 8u5
Oracle Java SE is prone to a remote vulnerability.
The vulnerability can be exploited over multiple protocols. This issue affects the 'Deployment' sub-component.
This vulnerability affects the following supported versions:
Java SE 7u60, Java SE 8u5
Exploit / POC
Oracle Java SE CVE-2014-4220 Remote Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].