Unspecified vulnerability in the Java Runtime Environment

Publish date: March 07, 2013

Severity: CRITICAL

CVE Identifier: CVE-2011-3544

Advisory Date: DEC 23, 2011

DESCRIPTION

Unspecified vulnerability in theJava Runtime Environment component in Oracle Java SE JDK and JRE allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to scripting.

TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields the following vulnerabilities using the specified filter identifiers. Trend Micro clients using OfficeScan with the Intrusion Defense Firewall plugin are also protected from exploits using these vulnerabilities.

Bulletin ID	Vulnerability ID	Rule Number & Title	Deep Security Pattern Version	Deep Security Pattern Release Date
	CVE-2011-3544	1004867 - Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability	11-034	Dec 6, 2011
	CVE-2011-3544	1004870 -Identified Suspicious JAR file		Dec 21, 2011

SOLUTION

PATCH: http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html

AFFECTED SOFTWARE AND VERSION

Oracle Java JDK and JRE 7
Oracle JDK and JRE 7
Oracle JDK and JRE 5.0 Update 31 and earlier
Oracle SDK and JRE 1.4.2_33 and earlier
Oracle JavaFX 2.0
Oracle JRockit R28.1.4 and earlier (JDK and JRE 6 and 5.0)

OTHER INFORMATION

12 Security Predictions for 2012

Related Blog Entries

Related Malware

Related URLs

Featured Stories

$https://documents.trendmicro.com/images/TEx/articles/20180903221730972-24-yhxppax-800.jpg$
MQTT and CoAP: Security and Privacy Issues in IoT and IIoT Communication Protocols
We looked into MQTT brokers and CoAP servers around the world to assess IoT protocol security. Learn how to prevent risks and secure machine-to-machine (M2M) communications over MQTT and CoAP in our research.
Read more
$hacker machine interface$
The State of SCADA HMI Vulnerabilities
A complete discussion of the different vulnerability categories, including case studies of vulnerable SCADA HMIs. The paper also provides a guide for vulnerability researchers, as well as vendors on quick and efficient bug discovery.
Read more
Rogue Robots: Testing the Limits of an Industrial Robot’s Security
The modern world relies heavily on industrial robots. But is the current robotics ecosystem secure enough to withstand a cyber attack?
Read more
$two years of pawn storm$
From Espionage to Cyber Propaganda: Pawn Storm's Activities over the Past Two Years
This paper takes a look at Pawn Storm's operations within the last two years, and how the group has expanded their activities from espionage to the use of cyber propaganda tactics.
Read more