Oval Definition:oval:org.cisecurity:def:1778
Revision Date:2017-03-03Version:9
Title:Vulnerability in Oracle Java SE 6u131, 7u121, and 8u112; Java SE Embedded 8u111; and JRockit R28 3.12 - CVE-2017-3241
Description:Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CPUJAN2017
CVE-2017-3241
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Java Development Kit 1.6
Java Development Kit 1.7
Java Development Kit 1.8
Java Runtime Environment 1.6
Java Runtime Environment 1.7
Java Runtime Environment 1.8
JRockit R28
Definition Synopsis
  • Java SE Development Kit 1.6 is installed + version
  • Java SE Development Kit 6 is installed
  • AND Check if Java SE Development Kit 1.6 version is less than 6.0.1320
  • OR Java SE Runtime Environment 1.6 is installed + version
  • Java SE Runtime Environment 6 is installed
  • AND Check if Java SE Runtime Environment 1.6 version is less than 6.0.1320
  • OR Java SE Development Kit 1.7 is installed + version
  • Java SE Development Kit 7 is installed
  • AND Check if Java SE Development Kit 1.7 version is less than 7.0.1220
  • OR Java SE Runtime Environment 1.7 is installed + version
  • Java SE Runtime Environment 7 is installed
  • AND Check if Java SE Runtime Environment 1.7 version is less than 7.0.1220
  • OR Java Development Kit 1.8 section
  • Java SE Development Kit 8 is installed
  • AND Check if Java SE Development Kit 1.8 version is less than 8.0.1130
  • OR Java Runtime Environment 1.8 section
  • Java SE Runtime Environment 8 is installed
  • AND Check if Java SE Runtime Environment 1.8 version is less than 8.0.1130
  • OR Vulnerable Java SE Embedded version
  • Check if java.exe version is less than 8.0.1120
  • AND Check if java.exe version is greater than or equal to 8.0.0
  • OR Determine if the version of JRockit R28 is less than R28.3.12
  • JRockit R28 is installed
  • AND Determine if the version of JRockit is less than or equal to R28.3.12
    • BACK