CVE-2016-3443
- State
- Published
- Severity
- Not scored
- Published
- Apr 21, 2016
- Updated
- Oct 15, 2024
- Reserved
- Mar 17, 2016
Description
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2016:0677vendor-advisory
- SUSE-SU-2016:1299vendor-advisory
- RHSA-2016:1039vendor-advisory
- RHSA-2016:0701vendor-advisory
- SUSE-SU-2016:1303vendor-advisory
- SUSE-SU-2016:1475vendor-advisory
- SUSE-SU-2016:1300vendor-advisory
- RHSA-2016:1430vendor-advisory
- https://security.netapp.com/advisory/ntap-20160420-0001/
- RHSA-2016:0708vendor-advisory
- SUSE-SU-2016:1378vendor-advisory
- SUSE-SU-2016:1379vendor-advisory
- 86482vdb-entry
- SUSE-SU-2016:1458vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-16-376
- GLSA-201606-18vendor-advisory
- RHSA-2016:0716vendor-advisory
- 1035596vdb-entry
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- SUSE-SU-2016:1388vendor-advisory
- RHSA-2016:0702vendor-advisory
- RHSA-2016:0679vendor-advisory
- RHSA-2017:1216vendor-advisory
- RHSA-2016:0678vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.