What’s Vulnerable › Vulnerabilities

CVE-2011-3546

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-10-19 · updated 2026-06-16

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.

Affected products

• Oracle Javafx: 2.0
• Oracle Java SE: through 1.6.0; 1.7.0, 1.6.0-update22, 1.6.0-update23, 1.6.0-update24, 1.6.0-update25, 1.6.0-update26
• Oracle Java SE: through 1.6.0; 1.7.0, 1.6.0-update22, 1.6.0-update23, 1.6.0-update24, 1.6.0-update25, 1.6.0-update26
• Sun Jdk: 1.6.0, 1.6.0-update_10, 1.6.0-update_11, 1.6.0-update_12, 1.6.0-update_13, 1.6.0-update_14 (+15)
• Sun Jre: 1.6.0, 1.6.0-update_1, 1.6.0-update_10, 1.6.0-update_11, 1.6.0-update_12, 1.6.0-update_13 (+14)

References

• http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
• http://marc.info/?l=bugtraq&m=132750579901589&w=2
• http://marc.info/?l=bugtraq&m=134254866602253&w=2
• http://marc.info/?l=bugtraq&m=134254957702612&w=2
• http://osvdb.org/76509
• http://rhn.redhat.com/errata/RHSA-2013-1455.html
• http://secunia.com/advisories/48308
• http://www.ibm.com/developerworks/java/jdk/alerts/
• http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
• http://www.redhat.com/support/errata/RHSA-2011-1384.html
• http://www.securityfocus.com/bid/50239
• http://www.securitytracker.com/id?1026215

Get alerted when CVE-2011-3546 or the next vulnerability affects your stack