ByteOS

cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*

>>jdk>>Versions up to 1.5.0(inclusive)

cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*

>>jre>>Versions up to 1.5.0(inclusive)

cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*

>>jdk>>Versions up to 1.6.0(inclusive)

cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*

>>jdk>>1.6.0

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=124344236532162&w=2	cve@mitre.org	N/A
http://secunia.com/advisories/34489	cve@mitre.org	N/A
http://secunia.com/advisories/34495	cve@mitre.org	N/A
http://secunia.com/advisories/34496	cve@mitre.org	N/A
http://secunia.com/advisories/34632	cve@mitre.org	N/A
http://secunia.com/advisories/34675	cve@mitre.org	N/A
http://secunia.com/advisories/35156	cve@mitre.org	N/A
http://secunia.com/advisories/35223	cve@mitre.org	N/A
http://secunia.com/advisories/35255	cve@mitre.org	N/A
http://secunia.com/advisories/35416	cve@mitre.org	N/A
http://secunia.com/advisories/36185	cve@mitre.org	N/A
http://secunia.com/advisories/37386	cve@mitre.org	N/A
http://secunia.com/advisories/37460	cve@mitre.org	N/A
http://security.gentoo.org/glsa/glsa-200911-02.xml	cve@mitre.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1	cve@mitre.org	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1	cve@mitre.org	Patch Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1	cve@mitre.org	N/A
http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm	cve@mitre.org	N/A
http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm	cve@mitre.org	N/A
http://www.debian.org/security/2009/dsa-1769	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2009:137	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2009:162	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2009-0392.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2009-0394.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2009-1038.html	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/507985/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/34240	cve@mitre.org	N/A
http://www.securitytracker.com/id?1021894	cve@mitre.org	N/A
http://www.ubuntu.com/usn/usn-748-1	cve@mitre.org	N/A
http://www.vmware.com/security/advisories/VMSA-2009-0016.html	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2009/1426	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2009/3316	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6659	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8844	cve@mitre.org	N/A
https://rhn.redhat.com/errata/RHSA-2009-0377.html	cve@mitre.org	N/A
https://rhn.redhat.com/errata/RHSA-2009-1198.html	cve@mitre.org	N/A

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://marc.info/?l=bugtraq&m=124344236532162&w=2

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/34489

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/34495

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/34496

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/34632

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/34675

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/35156

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/35223

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/35255

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/35416

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/36185

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/37386

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/37460

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-200911-02.xml

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2009/dsa-1769

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:137

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:162

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-0392.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-0394.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-1038.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/34240

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1021894

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/usn-748-1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2009/1426

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6659

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8844

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://rhn.redhat.com/errata/RHSA-2009-0377.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://rhn.redhat.com/errata/RHSA-2009-1198.html

Source: cve@mitre.org

Resource: N/A

Similar CVEs

1926Records found

CVE-2011-2454

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.30%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2415

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-12.17% / 93.65%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2460

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.30%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2417

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-8.86% / 92.36%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2455

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.30%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2452

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.30%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2456

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-4.75% / 89.20%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2414

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-12.17% / 93.65%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2453

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.30%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2451

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.30%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2134

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-7.60% / 91.65%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2110

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-91.50% / 99.65%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2425

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-8.86% / 92.36%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2450

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-3.04% / 86.35%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2137

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-7.60% / 91.65%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2135

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-7.06% / 91.30%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2003-1576

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-4.67% / 89.08%

7 Day CHG~0.00%

Published-28 Jan, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors.

Product-management_center solaris change_manager n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-3869

Matching Score-10

Assigner-Flexera Software LLC

Matching Score-10

Assigner-Flexera Software LLC

CVSS Score-10||HIGH

EPSS-33.28% / 96.79%

7 Day CHG~0.00%

Published-26 May, 2009 | 21:00

Updated-07 Aug, 2024 | 09:53

Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters.

Product-solaris n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2457

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-4.75% / 89.20%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2140

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-89.32% / 99.53%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2130

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-7.60% / 91.65%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-1999-1588

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-22.45% / 95.69%

7 Day CHG~0.00%

Published-21 Apr, 2006 | 10:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.

Product-solaris n/a solaris

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-4541

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-15.79% / 94.57%

7 Day CHG~0.00%

Published-13 Oct, 2008 | 18:00

Updated-07 Aug, 2024 | 10:17

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.

Product-java_system_web_proxy_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-4556

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-79.05% / 99.03%

7 Day CHG~0.00%

Published-14 Oct, 2008 | 22:00

Updated-07 Aug, 2024 | 10:17

Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.

Product-solaris n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-3108

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-8.62% / 92.23%

7 Day CHG~0.00%

Published-09 Jul, 2008 | 23:00

Updated-07 Aug, 2024 | 09:28

Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.

Product-jre jdk sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0361

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-88.39% / 99.48%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.

Product-java_system_web_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-2404

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-12.95% / 93.89%

7 Day CHG~0.00%

Published-04 Jun, 2008 | 20:00

Updated-07 Aug, 2024 | 08:58

Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field.

Product-java_asp_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-5019

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.10% / 92.92%

7 Day CHG~0.00%

Published-20 Sep, 2007 | 21:00

Updated-07 Aug, 2024 | 15:17

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.

Product-jre java_web_start sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2459

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.30%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2445

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.30%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-3111

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-13.36% / 94.00%

7 Day CHG~0.00%

Published-09 Jul, 2008 | 23:00

Updated-07 Aug, 2024 | 09:28

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.

Product-jdk jre sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1493

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-92.45% / 99.72%

7 Day CHG~0.00%

Published-04 Mar, 2013 | 16:00

Updated-11 Apr, 2025 | 00:51

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.

Vendor-n/a Sun Microsystems (Oracle Corporation)Oracle Corporation

Product-jre jdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3548

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-3.06% / 86.39%

7 Day CHG~0.00%

Published-19 Oct, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.

Product-jdk jre n/a

CVE-2011-3554

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-3.17% / 86.63%

7 Day CHG~0.00%

Published-19 Oct, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.

Product-jdk jre n/a

CVE-2011-3545

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-10.18% / 92.96%

7 Day CHG~0.00%

Published-19 Oct, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.

Vendor-n/a Oracle Corporation Sun Microsystems (Oracle Corporation)

Product-jdk jre jrockit n/a

CVE-2011-3549

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-2.76% / 85.68%

7 Day CHG~0.00%

Published-19 Oct, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.

Product-jdk jre n/a

CVE-2011-3521

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-5.74% / 90.25%

7 Day CHG~0.00%

Published-19 Oct, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

Product-jdk jre n/a

CVE-2010-4452

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-87.78% / 99.45%

7 Day CHG+5.41%

Published-17 Feb, 2011 | 18:31

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.

Product-jdk jre n/a

CVE-2011-2416

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-4.08% / 88.29%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2138.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CVE-2011-2138

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-4.08% / 88.29%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CVE-2011-2136

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-4.08% / 88.29%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CVE-2011-0807

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-87.55% / 99.44%

7 Day CHG~0.00%

Published-20 Apr, 2011 | 03:09

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.

Vendor-n/a Oracle Corporation Sun Microsystems (Oracle Corporation)

Product-java_system_application_server glassfish_server n/a

CVE-2011-0871

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-10.58% / 93.11%

7 Day CHG~0.00%

Published-14 Jun, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.

Product-jdk jre n/a

CVE-2011-0802

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-12.94% / 93.89%

7 Day CHG~0.00%

Published-14 Jun, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound, a different vulnerability than CVE-2011-0814.

Product-jdk jre n/a

CVE-2011-0864

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-3.60% / 87.49%

7 Day CHG~0.00%

Published-14 Jun, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Product-jdk jre n/a

CVE-2011-0817

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-2.19% / 84.05%

7 Day CHG~0.00%

Published-14 Jun, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Vendor-n/a Sun Microsystems (Oracle Corporation)Microsoft Corporation

Product-windows jdk jre n/a

CVE-2011-0862

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-12.94% / 93.89%

7 Day CHG~0.00%

Published-14 Jun, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Multiple unspecified vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Product-jdk jre n/a

CVE-2011-0873

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-14.99% / 94.39%

7 Day CHG~0.00%

Published-14 Jun, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, and 5.0 Update 29 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Product-jdk jre n/a

CVE-2011-0814

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-12.94% / 93.89%

7 Day CHG~0.00%

Published-14 Jun, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound, a different vulnerability than CVE-2011-0802.

Product-jdk jre n/a

CVE-2010-4435

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-30.86% / 96.60%

7 Day CHG-4.12%

Published-19 Jan, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.