← CVE Radar
CVE-2011-3544Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
9.8 CRITICALEPSS 96.65%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Mar 24, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2011-3544
- Status
- Analyzed
- Assigner (CNA)
- oracle
- Published
- Oct 19, 2011
- Last modified
- 2026-06-16 23:33 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
oraclejdk40 version ranges
- before 1.6.0
- 1.6.0
- 1.6.0 update1
- 1.6.0 update10
- 1.6.0 update11
- 1.6.0 update12
- 1.6.0 update13
- 1.6.0 update14
- 1.6.0 update15
- 1.6.0 update16
- 1.6.0 update17
- 1.6.0 update18
- 1.6.0 update19
- 1.6.0 update2
- 1.6.0 update20
- 1.6.0 update21
- 1.6.0 update22
- 1.6.0 update23
- 1.6.0 update24
- 1.6.0 update25
- 1.6.0 update26
- 1.7.0
- 1.7.0 update1
- 1.7.0 update10
- 1.7.0 update11
- 1.7.0 update13
- 1.7.0 update15
- 1.7.0 update17
- 1.7.0 update2
- 1.7.0 update21
- 1.7.0 update25
- 1.7.0 update3
- 1.7.0 update4
- 1.7.0 update5
- 1.7.0 update6
- 1.7.0 update7
- 1.7.0 update7 b32
- 1.7.0 update9
- 1.7.0 update9 b31
- 1.7.0 update9 b32
oraclejre51 version ranges
- before 1.6.0
- 1.6.0
- 1.6.0 update1
- 1.6.0 update11
- 1.6.0 update12
- 1.6.0 update13
- 1.6.0 update14
- 1.6.0 update15
- 1.6.0 update16
- 1.6.0 update17
- 1.6.0 update18
- 1.6.0 update19
- 1.6.0 update2
- 1.6.0 update20
- 1.6.0 update21
- 1.6.0 update22
- 1.6.0 update23
- 1.6.0 update24
- 1.6.0 update25
- 1.6.0 update26
- 1.6.0 update3
- 1.6.0 update4
- 1.6.0 update5
- 1.6.0 update6
- 1.6.0 update7
- 1.6.0 update8
- 1.6.0 update9
- 1.7.0
- 1.7.0 update1
- 1.7.0 update10
- 1.7.0 update10 b31
- 1.7.0 update11
- 1.7.0 update13
- 1.7.0 update15
- 1.7.0 update17
- 1.7.0 update17 b31
- 1.7.0 update17 b32
- 1.7.0 update2
- 1.7.0 update21
- 1.7.0 update21 b31
- 1.7.0 update25
- 1.7.0 update25 b33
- 1.7.0 update25 b34
- 1.7.0 update25 b35
- 1.7.0 update3
- 1.7.0 update4
- 1.7.0 update5
- 1.7.0 update6
- 1.7.0 update7
- 1.7.0 update7 b32
- 1.7.0 update9
canonicalubuntu linux4 version ranges
- 10.04
- 10.10
- 11.04
- 11.10
redhatsatellite with embedded oracle1 version range
- 5.4
suselinux enterprise java1 version range
- 10 sp4
suselinux enterprise server1 version range
- 10 sp4
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
- marc.info http://marc.info/?l=bugtraq&m=132750579901589&w=2
- marc.info http://marc.info/?l=bugtraq&m=134254866602253&w=2
- marc.info http://marc.info/?l=bugtraq&m=134254957702612&w=2
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2013-1455.html
- secunia.com http://secunia.com/advisories/48308
- security.gentoo.org http://security.gentoo.org/glsa/glsa-201406-32.xml
- ibm.com http://www.ibm.com/developerworks/java/jdk/alerts/
- oracle.com http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2011-1384.html
- securityfocus.com http://www.securityfocus.com/bid/50218
- securitytracker.com http://www.securitytracker.com/id?1026215
- ubuntu.com http://www.ubuntu.com/usn/USN-1263-1
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/70849
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13947
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-3544