http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html

http://marc.info/?l=bugtraq&m=142496355704097&w=2

http://marc.info/?l=bugtraq&m=142496355704097&w=2

http://marc.info/?l=bugtraq&m=142607790919348&w=2

http://rhn.redhat.com/errata/RHSA-2015-0068.html

http://rhn.redhat.com/errata/RHSA-2015-0079.html

http://rhn.redhat.com/errata/RHSA-2015-0080.html

http://rhn.redhat.com/errata/RHSA-2015-0085.html

http://rhn.redhat.com/errata/RHSA-2015-0086.html

http://www.debian.org/security/2015/dsa-3144

http://www.debian.org/security/2015/dsa-3147

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

http://www.securityfocus.com/bid/72132

http://www.securitytracker.com/id/1031580

http://www.ubuntu.com/usn/USN-2486-1

http://www.ubuntu.com/usn/USN-2487-1

http://www.vmware.com/security/advisories/VMSA-2015-0003.html

https://security.gentoo.org/glsa/201507-14

https://security.gentoo.org/glsa/201603-14

OR
     *cpe:2.3:a:oracle:jre:1.7.0:update_72:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jre:1.7.0:update72:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jre:1.8.0:update_25:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jre:1.8.0:update25:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jre:1.6.0:update_85:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jre:1.6.0:update85:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_85:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update85:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.7.0:update_72:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.7.0:update72:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.8.0:update_25:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.8.0:update25:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:novell:opensuse:13.2:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

http://www.securityfocus.com/bid/72132 [No Types Assigned]

https://security.gentoo.org/glsa/201507-14 [No Types Assigned]

https://security.gentoo.org/glsa/201603-14 [No Types Assigned]

Configuration 1
     OR
          *cpe:2.3:a:oracle:jdk:1.8.0:update_25:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jre:1.8.0:update_25:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jdk:1.7.0:update_72:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jre:1.7.0:update_72:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jdk:1.6.0:update_85:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jre:1.6.0:update_85:*:*:*:*:*:*

Configuration 1
     OR
          *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:opensuse:13.2:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
          *cpe:2.3:

http://www.vmware.com/security/advisories/VMSA-2015-0003.html

http://packetstormsecurity.com/files/131271/VMware-Security-Advisory-2015-0003.html

http://seclists.org/fulldisclosure/2015/Apr/5

http://www.securityfocus.com/archive/1/archive/1/535181/100/0/threaded

http://packetstormsecurity.com/files/131271/VMware-Security-Advisory-2015-0003.html

http://seclists.org/fulldisclosure/2015/Apr/5

http://www.securityfocus.com/archive/1/archive/1/535181/100/0/threaded

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581

http://marc.info/?l=bugtraq&m=142607790919348&w=2

http://rhn.redhat.com/errata/RHSA-2015-0068.html

http://rhn.redhat.com/errata/RHSA-2015-0079.html

http://rhn.redhat.com/errata/RHSA-2015-0080.html

http://rhn.redhat.com/errata/RHSA-2015-0085.html

http://rhn.redhat.com/errata/RHSA-2015-0086.html

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html

http://www.ubuntu.com/usn/USN-2486-1

http://www.ubuntu.com/usn/USN-2487-1

http://marc.info/?l=bugtraq&m=142496355704097&w=2

http://www.debian.org/security/2015/dsa-3144

http://www.debian.org/security/2015/dsa-3147

http://www.securitytracker.com/id/1031580

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

NVD-CWE-noinfo

Configuration 1
     OR
          *cpe:2.3:a:oracle:jdk:1.8.0:update_25:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jre:1.8.0:update_25:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jdk:1.7.0:update_72:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jre:1.7.0:update_72:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jdk:1.6.0:update_85:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jre:1.6.0:update_85:*:*:*:*:*:*

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html Advisory, Patch

Per:http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html


Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.