CVE-2015-4760

Impact:
Critical
Public Date:
2015-07-14
CWE:
CWE-787
Bugzilla:
1242447: CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)

The MITRE CVE dictionary describes this issue as:

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Find out more about CVE-2015-4760 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 6.8
Base Metrics AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Oracle Java for Red Hat Enterprise Linux 6 (java-1.8.0-oracle) RHSA-2015:1241 2015-07-17
Red Hat Enterprise Linux Supplementary (v. 7) (java-1.7.1-ibm) RHSA-2015:1485 2015-07-22
Oracle Java for Red Hat Enterprise Linux 6 (java-1.6.0-sun) RHSA-2015:1243 2015-07-17
Oracle Java for Red Hat Enterprise Linux 6 (java-1.7.0-oracle) RHSA-2015:1242 2015-07-17
Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-ibm) RHSA-2015:1486 2015-07-22
Oracle Java for Red Hat Enterprise Linux 7 (java-1.7.0-oracle) RHSA-2015:1242 2015-07-17
Oracle Java for Red Hat Enterprise Linux 7 (java-1.6.0-sun) RHSA-2015:1243 2015-07-17
Red Hat Enterprise Linux Supplementary 5 (java-1.7.0-ibm) RHSA-2015:1488 2015-07-23
Red Hat Enterprise Linux Supplementary 5 (java-1.5.0-ibm) RHSA-2015:1544 2015-08-04
Red Hat Enterprise Linux 6 (java-1.8.0-openjdk) RHSA-2015:1228 2015-07-15
Red Hat Enterprise Linux 6 (java-1.6.0-openjdk) RHSA-2015:1526 2015-07-30
Red Hat Enterprise Linux Supplementary (v. 6) (java-1.5.0-ibm) RHSA-2015:1544 2015-08-04
Red Hat Enterprise Linux Supplementary (v. 6) (java-1.6.0-ibm) RHSA-2015:1486 2015-07-22
Red Hat Enterprise Linux Supplementary (v. 6) (java-1.7.1-ibm) RHSA-2015:1485 2015-07-22
Oracle Java for Red Hat Enterprise Linux 7 (java-1.8.0-oracle) RHSA-2015:1241 2015-07-17
Red Hat Enterprise Linux 5 (java-1.6.0-openjdk) RHSA-2015:1526 2015-07-30
Red Hat Enterprise Linux 6 (java-1.7.0-openjdk) RHSA-2015:1229 2015-07-15
Red Hat Satellite 5.6 (RHEL v.6) (java-1.6.0-ibm) RHSA-2015:1604 2015-08-12
Red Hat Enterprise Linux 5 (java-1.7.0-openjdk) RHSA-2015:1230 2015-07-15
Red Hat Enterprise Linux 7 (java-1.6.0-openjdk) RHSA-2015:1526 2015-07-30
Red Hat Satellite 5.7 (RHEL v.6) (java-1.6.0-ibm) RHSA-2015:1604 2015-08-12
Red Hat Satellite 5.6 (RHEL v.5) (java-1.6.0-ibm) RHSA-2015:1604 2015-08-12
Oracle Java for Red Hat Enterprise Linux 5 (java-1.7.0-oracle) RHSA-2015:1242 2015-07-17
Oracle Java for Red Hat Enterprise Linux 5 (java-1.6.0-sun) RHSA-2015:1243 2015-07-17
Red Hat Enterprise Linux 7 (java-1.8.0-openjdk) RHSA-2015:1228 2015-07-15
Red Hat Enterprise Linux 7 (java-1.7.0-openjdk) RHSA-2015:1229 2015-07-15

Affected Packages State

Platform Package State
Red Hat Enterprise Linux 7 icu Will not fix
Red Hat Enterprise Linux 6 icu Will not fix
Red Hat Enterprise Linux 5 icu Will not fix

External References

Last Modified

CVE description copyright © 2017, The MITRE Corporation