CVE

Id
67837  
CVE No.
CVE-2014-0428  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.  
Phase
Assigned (20131212)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
655285 67837 CVE-2014-0428 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698  View
655286 67837 CVE-2014-0428 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
655287 67837 CVE-2014-0428 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1051519  View
655288 67837 CVE-2014-0428 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777  View
655289 67837 CVE-2014-0428 HP:HPSBUX02972  View
655290 67837 CVE-2014-0428 URL:http://marc.info/?l=bugtraq&m=139402697611681&w=2  View
655291 67837 CVE-2014-0428 HP:HPSBUX02973  View
655292 67837 CVE-2014-0428 URL:http://marc.info/?l=bugtraq&m=139402749111889&w=2  View
655293 67837 CVE-2014-0428 HP:SSRT101454  View
655294 67837 CVE-2014-0428 URL:http://marc.info/?l=bugtraq&m=139402697611681&w=2  View
655295 67837 CVE-2014-0428 HP:SSRT101455  View
655296 67837 CVE-2014-0428 URL:http://marc.info/?l=bugtraq&m=139402749111889&w=2  View
655297 67837 CVE-2014-0428 REDHAT:RHSA-2014:0026  View
655298 67837 CVE-2014-0428 URL:http://rhn.redhat.com/errata/RHSA-2014-0026.html  View
655299 67837 CVE-2014-0428 REDHAT:RHSA-2014:0027  View
655300 67837 CVE-2014-0428 URL:http://rhn.redhat.com/errata/RHSA-2014-0027.html  View
655301 67837 CVE-2014-0428 REDHAT:RHSA-2014:0097  View
655302 67837 CVE-2014-0428 URL:http://rhn.redhat.com/errata/RHSA-2014-0097.html  View
655303 67837 CVE-2014-0428 REDHAT:RHSA-2014:0136  View
655304 67837 CVE-2014-0428 URL:http://rhn.redhat.com/errata/RHSA-2014-0136.html  View
655305 67837 CVE-2014-0428 REDHAT:RHSA-2014:0030  View
655306 67837 CVE-2014-0428 URL:http://rhn.redhat.com/errata/RHSA-2014-0030.html  View
655307 67837 CVE-2014-0428 REDHAT:RHSA-2014:0134  View
655308 67837 CVE-2014-0428 URL:http://rhn.redhat.com/errata/RHSA-2014-0134.html  View
655309 67837 CVE-2014-0428 REDHAT:RHSA-2014:0135  View
655310 67837 CVE-2014-0428 URL:http://rhn.redhat.com/errata/RHSA-2014-0135.html  View
655311 67837 CVE-2014-0428 SUSE:openSUSE-SU-2014:0174  View
655312 67837 CVE-2014-0428 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html  View
655313 67837 CVE-2014-0428 SUSE:SUSE-SU-2014:0246  View
655314 67837 CVE-2014-0428 URL:http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html  View
655315 67837 CVE-2014-0428 SUSE:SUSE-SU-2014:0266  View
655316 67837 CVE-2014-0428 URL:http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html  View
655317 67837 CVE-2014-0428 SUSE:openSUSE-SU-2014:0177  View
655318 67837 CVE-2014-0428 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html  View
655319 67837 CVE-2014-0428 SUSE:openSUSE-SU-2014:0180  View
655320 67837 CVE-2014-0428 URL:http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html  View
655321 67837 CVE-2014-0428 SUSE:SUSE-SU-2014:0451  View
655322 67837 CVE-2014-0428 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html  View
655323 67837 CVE-2014-0428 UBUNTU:USN-2089-1  View
655324 67837 CVE-2014-0428 URL:http://www.ubuntu.com/usn/USN-2089-1  View
655325 67837 CVE-2014-0428 UBUNTU:USN-2124-1  View
655326 67837 CVE-2014-0428 URL:http://www.ubuntu.com/usn/USN-2124-1  View
655327 67837 CVE-2014-0428 BID:64758  View
655328 67837 CVE-2014-0428 URL:http://www.securityfocus.com/bid/64758  View
655329 67837 CVE-2014-0428 BID:64935  View
655330 67837 CVE-2014-0428 URL:http://www.securityfocus.com/bid/64935  View
655331 67837 CVE-2014-0428 OSVDB:101996  View
655332 67837 CVE-2014-0428 URL:http://osvdb.org/101996  View
655333 67837 CVE-2014-0428 SECTRACK:1029608  View
655334 67837 CVE-2014-0428 URL:http://www.securitytracker.com/id/1029608  View
655335 67837 CVE-2014-0428 SECUNIA:56432  View
655336 67837 CVE-2014-0428 URL:http://secunia.com/advisories/56432  View
655337 67837 CVE-2014-0428 SECUNIA:56485  View
655338 67837 CVE-2014-0428 URL:http://secunia.com/advisories/56485  View
655339 67837 CVE-2014-0428 SECUNIA:56486  View
655340 67837 CVE-2014-0428 URL:http://secunia.com/advisories/56486  View
655341 67837 CVE-2014-0428 SECUNIA:56535  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14548 JVNDB-2014-003423 Oracle Hyperion の Hyperion BI+ における Web Analysis に関する脆弱性 Oracle Hyperion の Hyperion BI+ には、Web Analysis に関する処理に不備があるため、完全性に影響のある脆弱性が存在します。 CVE-2014-0436 67837 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003423.html  View