| Package | Affected versions | Patched versions |
|---|---|---|
| jdk | = 1.4.2_38= 1.5.0= 1.6.0= 1.7.0≤ 1.4.2_40 | |
| jre | = 1.4.2_38= 1.5.0= 1.6.0= 1.7.0≤ 1.4.2_40 | |
| jdk | = 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_19= 1.4.2_2= 1.4.2_22= 1.4.2_23= 1.4.2_25= 1.4.2_26= 1.4.2_27= 1.4.2_28= 1.4.2_29= 1.4.2_3= 1.4.2_30= 1.4.2_31= 1.4.2_32= 1.4.2_33= 1.4.2_34= 1.4.2_35= 1.4.2_36= 1.4.2_37= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0= 1.6.0 | |
| jre | = 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_19= 1.4.2_2= 1.4.2_20= 1.4.2_21= 1.4.2_22= 1.4.2_23= 1.4.2_24= 1.4.2_25= 1.4.2_26= 1.4.2_27= 1.4.2_28= 1.4.2_29= 1.4.2_3= 1.4.2_30= 1.4.2_31= 1.4.2_32= 1.4.2_33= 1.4.2_34= 1.4.2_35= 1.4.2_36= 1.4.2_37= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0= 1.6.0 |
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free