Oracle Java SE Remote Vulnerabilities (CVE-2014-0417)

Release date:
Updated on:

Affected Systems:
Oracle Java SE 7u45
Oracle Java SE 6u65
Oracle Java SE 5.0u55
Oracle JavaFX 2.2.45
Oracle Java SE Embedded 7u45
Description:
--------------------------------------------------------------------------------
Bugtraq id: 64932
CVE (CAN) ID: CVE-2014-0417

Java SE is short for Java platform standard edition based on JDK and JRE. It is used to develop and deploy Java applications on the desktop, server, and embedded devices and real-time environments.

Java SE 5.0u55, Java SE 6u65, Java SE 7u45, JavaFX 2.2.45, and Java SE Embedded 7u45 have security vulnerabilities, attackers can exploit this vulnerability to affect confidentiality, integrity, and availability.

<* Source: Oracle

Link: http://secunia.com/advisories/57137/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Oracle
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.oracle.com/technetwork/java/javase/downloads/index.html
Http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html