CVE-2014-1876

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1…

published February 10, 2014

CVSS
—
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.3th percentile
Published
2014-02-10T23:00Z
EPSS history
Timeline
  • 10 FEB 23:00Z
    The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1…
    cvelistv5