CVE-2014-3065

CVSS V2 Medium 6.9 CVSS V3 None
Description
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
Overview
  • CVE ID
  • CVE-2014-3065
  • Assigner
  • psirt@us.ibm.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2014-12-02T01:59:01
  • Last Modified Date
  • 2015-03-18T02:00:48
Weakness Enumerations
CWE URL
CWE-94 http://cwe.mitre.org/data/definitions/94.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:ibm:java:5.0.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.11.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.11.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.11.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.12.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.12.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.12.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.12.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.12.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.12.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.13.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.14.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.15.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.16.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.16.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.16.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:5.0.16.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.8.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.9.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.9.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.10.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.10.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.11.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.12.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.13.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.13.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.13.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:6.0.14.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:7.0.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:7.0.1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:7.0.2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:7.0.3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:7.0.4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:7.0.4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:7.0.4.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:java:7.0.5.0:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • LOCAL
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 6.9
  • Severity
  • MEDIUM
  • Exploitability Score
  • 3.4
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/71147
http://www-01.ibm.com/support/docview.wss?uid=swg21688283 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66044 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1162554
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66045 Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-1882.html
http://rhn.redhat.com/errata/RHSA-2014-1877.html
http://rhn.redhat.com/errata/RHSA-2014-1876.html
http://rhn.redhat.com/errata/RHSA-2014-1881.html
http://rhn.redhat.com/errata/RHSA-2014-1880.html
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
http://rhn.redhat.com/errata/RHSA-2015-0264.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2014-3065
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065
History
Created Old Value New Value Data Type Notes
2022-05-10 10:23:45 Added to TrackCVE
2022-12-02 02:30:29 2014-12-02T01:59Z 2014-12-02T01:59:01 CVE Published Date updated
2022-12-02 02:30:29 2015-03-18T02:00:48 CVE Modified Date updated
2022-12-02 02:30:29 Modified Vulnerability Status updated