Vulnerability in Sun Jdk
CVE-2011-0865
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to Deserialization.
EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.
Affected products
Public proof-of-concept exploits
References
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
- secalert_us@oracle.com (vendor-advisory, x_refsource_GENTOO)
- secalert_us@oracle.com (x_refsource_HP, vendor-advisory)
- secalert_us@oracle.com (signature, x_refsource_OVAL, vdb-entry)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
- secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
- secalert_us@oracle.com (vendor-advisory, x_refsource_DEBIAN)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2011-0865?
- CVE-2011-0865 is a vulnerability in Sun Jdk. Published 2011-06-14.
- Is CVE-2011-0865 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.