CVE-2014-6585

Published Jan 21, 2015

Last updated 3 years ago

Overview

Description
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.
Source
secalert_us@oracle.com
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
2.6
Impact score
2.9
Exploitability score
4.9
Vector string
AV:N/AC:H/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov
NVD-CWE-noinfo

Social media

Hype score
Not currently trending

Evaluator

Comment
per: "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html" Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.
Impact
-
Solution
-

Configurations