CVE-2016-3443

Published: Apr 21, 2016Modified: May 6, 2026

9.6

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 6.0

Source: NVD

Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

Affected (6)

Products: Oracle: Jdk, Jre

2 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.6.0 update113
Oracle Jdk	Version 1.7.0 update99
Oracle Jdk	Version 1.8.0 update77
Oracle Jre	Version 1.6.0 update113
Oracle Jre	Version 1.7.0 update99
Oracle Jre	Version 1.8.0 update77

References (48)

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-0677.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-0678.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-0679.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-0701.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-0702.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-0708.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-0716.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2016-1039.html

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/bid/86482

Source: secalert_us@oracle.com

http://www.securitytracker.com/id/1035596

Source: secalert_us@oracle.com

http://www.zerodayinitiative.com/advisories/ZDI-16-376

Source: secalert_us@oracle.com

https://access.redhat.com/errata/RHSA-2016:1430

Source: secalert_us@oracle.com

https://access.redhat.com/errata/RHSA-2017:1216

Source: secalert_us@oracle.com

https://security.gentoo.org/glsa/201606-18

Source: secalert_us@oracle.com

https://security.netapp.com/advisory/ntap-20160420-0001/

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0677.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0678.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0679.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0701.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0702.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0708.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-0716.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-1039.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/86482

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1035596

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-16-376

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2016:1430

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2017:1216

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201606-18

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20160420-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.