CVE Vulnerabilities

CVE-2014-8891

Published: Mar 06, 2015 | Modified: Jul 16, 2019
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager.

Affected Software

Name Vendor Start Version End Version
Java_sdk Ibm 5.0.0.0 (including) 5.0.16.8 (including)
Java_sdk Ibm 6.0.0.0 (including) 6.0.16.3 (excluding)
Java_sdk Ibm 6.1.0.0 (including) 6.1.8.2 (including)
Java_sdk Ibm 7.0.0.0 (including) 7.0.8.10 (excluding)
Java_sdk Ibm 7.1.0.0 (including) 7.1.2.10 (excluding)
Red Hat Enterprise Linux 5 Supplementary RedHat java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5 *
Red Hat Enterprise Linux 5 Supplementary RedHat java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el5 *
Red Hat Enterprise Linux 5 Supplementary RedHat java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el5 *
Red Hat Satellite 5.6 RedHat java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6 *
Red Hat Satellite 5.7 RedHat java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6 *
Supplementary for Red Hat Enterprise Linux 6 RedHat java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6 *
Supplementary for Red Hat Enterprise Linux 6 RedHat java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6 *
Supplementary for Red Hat Enterprise Linux 6 RedHat java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6 *
Supplementary for Red Hat Enterprise Linux 7 RedHat java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0 *

References