CVE-2011-3556 Other in n/a
Remote attackers can compromise confidentiality, integrity, and availability in Oracle Java SE via the RMI component.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-3556?
CVE-2011-3556 is a high-severity vulnerability in Oracle Jrockit, published on 19 Oct 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.
Which versions are affected by CVE-2011-3556?
It affects 3 products.
Products include Oracle Jrockit, Sun Jdk, Sun Jre.
How do I fix CVE-2011-3556?
Upgrade to a fixed version.
Is CVE-2011-3556 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2011-3556 exists.
Public exploit code: 2 Metasploit modules, 1 Exploit-DB entry and 1 proofs of concept on GitHub.
Other vulnerabilities in Oracle Jrockit
Sources
Also known as GHSA-x97f-rpv2-wwmc, MINI-47x2-x3fc-m679, MINI-55jc-5jp7-9cv8, MINI-7p4r-mwvc-fxx8, MINI-8vgh-j6mf-xwff, MINI-gx2f-48j4-33mx and 2 more.