RCE in Ibm Java

CVE-2014-3065

Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute ar…

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.001 (26.6th percentile) — read the EPSS interpretation.

Affected products

Ibm Java — versions 5.0.0.0, 5.0.11.0, 5.0.11.1
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

RHSA-2014:1880 (x_refsource_REDHAT, vendor-advisory)
RHSA-2014:1877 (x_refsource_REDHAT, vendor-advisory)
IV66045 (vendor-advisory, x_refsource_AIXAPAR, Vendor Advisory)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
IV66044 (vendor-advisory, x_refsource_AIXAPAR, Vendor Advisory)
RHSA-2014:1881 (x_refsource_REDHAT, vendor-advisory)
SUSE-SU-2014:1549 (vendor-advisory, x_refsource_SUSE)
SUSE-SU-2015:0376 (vendor-advisory, x_refsource_SUSE)
RHSA-2014:1876 (x_refsource_REDHAT, vendor-advisory)
RHSA-2015:0264 (x_refsource_REDHAT, vendor-advisory)