NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2011-3544

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

Affected products

VendorProductAffected versions
OracleJdk
before 1.6.0
Versions 1.6.0, 1.7.0
OracleJre
before 1.6.0
Versions 1.6.0, 1.7.0
CanonicalUbuntu Linux
Versions 10.04, 10.10, 11.04, 11.10
RedhatSatellite With Embedded Oracle
Version 5.4
SuseLinux Enterprise Java
Version 10
SuseLinux Enterprise Server
Version 10

Weakness classification

CWE-284

References