CVE-2015-0407

Published: Jan 21, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.

Affected (18)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · Fedoraproject: Fedora · +2 more

Show all products

Canonical: Ubuntu Linux · Debian: Debian Linux · Fedoraproject: Fedora · Redhat: Enterprise Linux · Oracle: Jdk, Jre

1 product

1 product

1 product

1 product

Enterprise Linux

2 products

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0
Fedoraproject Fedora	Version 20
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.5.0 update75
Oracle Jdk	Version 1.6.0 update85
Oracle Jdk	Version 1.7.0 update72
Oracle Jdk	Version 1.8.0 update25
Oracle Jre	Version 1.5.0 update75
Oracle Jre	Version 1.6.0 update85
Oracle Jre	Version 1.7.0 update72
Oracle Jre	Version 1.8.0 update25

References (50)

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=142496355704097&w=2

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=142607790919348&w=2

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0068.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0079.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0080.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0085.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0086.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0136.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-0264.html

Source: secalert_us@oracle.com

http://www.debian.org/security/2015/dsa-3144

Source: secalert_us@oracle.com

http://www.debian.org/security/2015/dsa-3147

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/72162

Source: secalert_us@oracle.com

http://www.securitytracker.com/id/1031580

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-2486-1

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-2487-1

Source: secalert_us@oracle.com

http://www.vmware.com/security/advisories/VMSA-2015-0003.html

Source: secalert_us@oracle.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/100150

Source: secalert_us@oracle.com

https://security.gentoo.org/glsa/201507-14

Source: secalert_us@oracle.com

https://security.gentoo.org/glsa/201603-14

Source: secalert_us@oracle.com

https://www-304.ibm.com/support/docview.wss?uid=swg21695474

Source: secalert_us@oracle.com

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=142496355704097&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=142607790919348&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0068.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0079.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0080.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0085.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0086.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0136.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0264.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3144

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3147

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/72162

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031580

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2486-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2487-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2015-0003.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/100150

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201507-14

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201603-14

Source: af854a3a-2127-422b-91ae-364da2661108

https://www-304.ibm.com/support/docview.wss?uid=swg21695474

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.