CVE-2011-3521

Oracle Java SE JDK/JRE <7.0-6.27 & <5.0.31 - Deserialization

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.

References (17)

Core 17
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201406-32.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48692
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=134254866602253&w=2
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13662
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=133365109612558&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48308
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=132750579901589&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/50215
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1455.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1384.html
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=134254957702612&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/70850
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026215
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1263-1
Various Sources x_refsource_confirm
http://www.ibm.com/developerworks/java/jdk/alerts/

Scores

EPSS 0.0857
EPSS Percentile 92.5%

Details

Status published
Products (3)
sun/jdk 1.7.0
sun/jdk 1.6.0 (25 CPE variants)
sun/jdk 1.5.0 (24 CPE variants)
Published Oct 19, 2011
Tracked Since Feb 18, 2026