Improper input validation in Oracle Openjdk
CVE-2014-8873
A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.045 (90.6th percentile) — read the EPSS interpretation.
Affected products
- Oracle Openjdk — versions 1.7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)