CVE-2011-3560

Published: Oct 19, 2011Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity, related to JSSE.

Affected (185)

Products: Sun: Jdk, Jre

Sun

2 products

Jdk

Jre

Configuration A

52 vulnerable

Vulnerable Software	Affected Versions
Sun Jdk	Up to 1.6.0
Sun Jdk	Version 1.6.0
Sun Jdk	Version 1.6.0 update1
Sun Jdk	Version 1.6.0 update2
Sun Jdk	Version 1.6.0 update_10
Sun Jdk	Version 1.6.0 update_11
Sun Jdk	Version 1.6.0 update_12
Sun Jdk	Version 1.6.0 update_13
Sun Jdk	Version 1.6.0 update_14
Sun Jdk	Version 1.6.0 update_15
Sun Jdk	Version 1.6.0 update_16
Sun Jdk	Version 1.6.0 update_17
Sun Jdk	Version 1.6.0 update_18
Sun Jdk	Version 1.6.0 update_19
Sun Jdk	Version 1.6.0 update_20
Sun Jdk	Version 1.6.0 update_21
Sun Jdk	Version 1.6.0 update_22
Sun Jdk	Version 1.6.0 update_23
Sun Jdk	Version 1.6.0 update_24
Sun Jdk	Version 1.6.0 update_25
Sun Jdk	Version 1.6.0 update_26
Sun Jdk	Version 1.6.0 update_3
Sun Jdk	Version 1.6.0 update_4
Sun Jdk	Version 1.6.0 update_5
Sun Jdk	Version 1.6.0 update_6
Sun Jdk	Version 1.6.0 update_7
Sun Jre	Up to 1.6.0
Sun Jre	Version 1.6.0
Sun Jre	Version 1.6.0 update_10
Sun Jre	Version 1.6.0 update_11
Sun Jre	Version 1.6.0 update_12
Sun Jre	Version 1.6.0 update_13
Sun Jre	Version 1.6.0 update_14
Sun Jre	Version 1.6.0 update_15
Sun Jre	Version 1.6.0 update_16
Sun Jre	Version 1.6.0 update_17
Sun Jre	Version 1.6.0 update_18
Sun Jre	Version 1.6.0 update_19
Sun Jre	Version 1.6.0 update_1
Sun Jre	Version 1.6.0 update_20
Sun Jre	Version 1.6.0 update_21
Sun Jre	Version 1.6.0 update_22
Sun Jre	Version 1.6.0 update_23
Sun Jre	Version 1.6.0 update_24
Sun Jre	Version 1.6.0 update_25
Sun Jre	Version 1.6.0 update_26
Sun Jre	Version 1.6.0 update_2
Sun Jre	Version 1.6.0 update_3
Sun Jre	Version 1.6.0 update_4
Sun Jre	Version 1.6.0 update_5
Sun Jre	Version 1.6.0 update_6
Sun Jre	Version 1.6.0 update_7

Configuration B

63 vulnerable

Vulnerable Software	Affected Versions
Sun Jdk	Up to 1.5.0
Sun Jdk	Version 1.5.0
Sun Jdk	Version 1.5.0 update10
Sun Jdk	Version 1.5.0 update11
Sun Jdk	Version 1.5.0 update11_b03
Sun Jdk	Version 1.5.0 update12
Sun Jdk	Version 1.5.0 update13
Sun Jdk	Version 1.5.0 update14
Sun Jdk	Version 1.5.0 update15
Sun Jdk	Version 1.5.0 update16
Sun Jdk	Version 1.5.0 update17
Sun Jdk	Version 1.5.0 update18
Sun Jdk	Version 1.5.0 update19
Sun Jdk	Version 1.5.0 update1
Sun Jdk	Version 1.5.0 update20
Sun Jdk	Version 1.5.0 update21
Sun Jdk	Version 1.5.0 update22
Sun Jdk	Version 1.5.0 update23
Sun Jdk	Version 1.5.0 update24
Sun Jdk	Version 1.5.0 update25
Sun Jdk	Version 1.5.0 update26
Sun Jdk	Version 1.5.0 update27
Sun Jdk	Version 1.5.0 update28
Sun Jdk	Version 1.5.0 update29
Sun Jdk	Version 1.5.0 update2
Sun Jdk	Version 1.5.0 update3
Sun Jdk	Version 1.5.0 update4
Sun Jdk	Version 1.5.0 update5
Sun Jdk	Version 1.5.0 update6
Sun Jdk	Version 1.5.0 update7
Sun Jdk	Version 1.5.0 update7_b03
Sun Jdk	Version 1.5.0 update8
Sun Jdk	Version 1.5.0 update9
Sun Jre	Up to 1.5.0
Sun Jre	Version 1.5.0
Sun Jre	Version 1.5.0 update10
Sun Jre	Version 1.5.0 update11
Sun Jre	Version 1.5.0 update12
Sun Jre	Version 1.5.0 update13
Sun Jre	Version 1.5.0 update14
Sun Jre	Version 1.5.0 update15
Sun Jre	Version 1.5.0 update16
Sun Jre	Version 1.5.0 update17
Sun Jre	Version 1.5.0 update18
Sun Jre	Version 1.5.0 update19
Sun Jre	Version 1.5.0 update1
Sun Jre	Version 1.5.0 update20
Sun Jre	Version 1.5.0 update21
Sun Jre	Version 1.5.0 update22
Sun Jre	Version 1.5.0 update23
Sun Jre	Version 1.5.0 update24
Sun Jre	Version 1.5.0 update25
Sun Jre	Version 1.5.0 update26
Sun Jre	Version 1.5.0 update27
Sun Jre	Version 1.5.0 update29
Sun Jre	Version 1.5.0 update2
Sun Jre	Version 1.5.0 update3
Sun Jre	Version 1.5.0 update4
Sun Jre	Version 1.5.0 update5
Sun Jre	Version 1.5.0 update6
Sun Jre	Version 1.5.0 update7
Sun Jre	Version 1.5.0 update8
Sun Jre	Version 1.5.0 update9

Configuration C

68 vulnerable

Vulnerable Software	Affected Versions
Sun Jdk	Up to 1.4.2_33
Sun Jdk	Version 1.4.2
Sun Jdk	Version 1.4.2_10
Sun Jdk	Version 1.4.2_11
Sun Jdk	Version 1.4.2_12
Sun Jdk	Version 1.4.2_13
Sun Jdk	Version 1.4.2_14
Sun Jdk	Version 1.4.2_15
Sun Jdk	Version 1.4.2_16
Sun Jdk	Version 1.4.2_17
Sun Jdk	Version 1.4.2_18
Sun Jdk	Version 1.4.2_19
Sun Jdk	Version 1.4.2_1
Sun Jdk	Version 1.4.2_20
Sun Jdk	Version 1.4.2_21
Sun Jdk	Version 1.4.2_22
Sun Jdk	Version 1.4.2_23
Sun Jdk	Version 1.4.2_24
Sun Jdk	Version 1.4.2_25
Sun Jdk	Version 1.4.2_26
Sun Jdk	Version 1.4.2_27
Sun Jdk	Version 1.4.2_28
Sun Jdk	Version 1.4.2_29
Sun Jdk	Version 1.4.2_2
Sun Jdk	Version 1.4.2_30
Sun Jdk	Version 1.4.2_31
Sun Jdk	Version 1.4.2_32
Sun Jdk	Version 1.4.2_3
Sun Jdk	Version 1.4.2_4
Sun Jdk	Version 1.4.2_5
Sun Jdk	Version 1.4.2_6
Sun Jdk	Version 1.4.2_7
Sun Jdk	Version 1.4.2_8
Sun Jdk	Version 1.4.2_9
Sun Jre	Up to 1.4.2_33
Sun Jre	Version 1.4.2
Sun Jre	Version 1.4.2_10
Sun Jre	Version 1.4.2_11
Sun Jre	Version 1.4.2_12
Sun Jre	Version 1.4.2_13
Sun Jre	Version 1.4.2_14
Sun Jre	Version 1.4.2_15
Sun Jre	Version 1.4.2_16
Sun Jre	Version 1.4.2_17
Sun Jre	Version 1.4.2_18
Sun Jre	Version 1.4.2_19
Sun Jre	Version 1.4.2_1
Sun Jre	Version 1.4.2_20
Sun Jre	Version 1.4.2_21
Sun Jre	Version 1.4.2_22
Sun Jre	Version 1.4.2_23
Sun Jre	Version 1.4.2_24
Sun Jre	Version 1.4.2_25
Sun Jre	Version 1.4.2_26
Sun Jre	Version 1.4.2_27
Sun Jre	Version 1.4.2_28
Sun Jre	Version 1.4.2_29
Sun Jre	Version 1.4.2_2
Sun Jre	Version 1.4.2_30
Sun Jre	Version 1.4.2_31
Sun Jre	Version 1.4.2_32
Sun Jre	Version 1.4.2_3
Sun Jre	Version 1.4.2_4
Sun Jre	Version 1.4.2_5
Sun Jre	Version 1.4.2_6
Sun Jre	Version 1.4.2_7
Sun Jre	Version 1.4.2_8
Sun Jre	Version 1.4.2_9

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Sun Jdk	Version 1.7.0
Sun Jre	Version 1.7.0

References (52)

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=132750579901589&w=2

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=133365109612558&w=2

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=133728004526190&w=2

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=134254866602253&w=2

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=134254957702612&w=2

Source: secalert_us@oracle.com

http://osvdb.org/76507

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2012-0508.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2013-1455.html

Source: secalert_us@oracle.com

http://secunia.com/advisories/48308

Source: secalert_us@oracle.com

http://secunia.com/advisories/48692

Source: secalert_us@oracle.com

http://secunia.com/advisories/48915

Source: secalert_us@oracle.com

http://secunia.com/advisories/48948

Source: secalert_us@oracle.com

http://secunia.com/advisories/49198

Source: secalert_us@oracle.com

http://security.gentoo.org/glsa/glsa-201406-32.xml

Source: secalert_us@oracle.com

http://www.ibm.com/developerworks/java/jdk/alerts/

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2011-1384.html

Source: secalert_us@oracle.com

http://www.redhat.com/support/errata/RHSA-2012-0006.html

Source: secalert_us@oracle.com

http://www.securityfocus.com/bid/50236

Source: secalert_us@oracle.com

http://www.securitytracker.com/id?1026215

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-1263-1

Source: secalert_us@oracle.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/70834

Source: secalert_us@oracle.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14394

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html