Back to CVE Browser

CVE-2014-0428

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0830%

EPSS Percentile22.90th

PublishedJan 15, 2014

Last ModifiedApr 29, 2026

Vulnerability Description

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.

Affected Platforms (CPE)

📦

Oracle

Jdk

= 1.6.0

📦

Oracle

Jre

= 1.6.0

📦

Oracle

Jdk

= 1.5.0

📦

Oracle

Jre

= 1.5.0

📦

Oracle

Jre

= 1.7.0

References & Advisories

🔗 http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698

🔗 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html

🔗 http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html

🔗 http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html

🔗 http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html

🔗 http://marc.info/?l=bugtraq&m=139402697611681&w=2

Related Vulnerabilities

CVE-2007-243510.0

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote...

CVE-2008-535310.0

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and...

CVE-2004-025310.0

IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via cer...

CVE-2008-535510.0

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1...

CVE-2014-0428 Detail & Impact Analysis | CVSS 10.0 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space