Main
Vulnerability Database
Exploits
ID:1256 - Exploit for Remote code execution in JRockit and Oracle Java SE - CVE-2017-3241
ID:1256 - Exploit for Remote code execution in JRockit and Oracle Java SE - CVE-2017-3241
Published: March 18, 2020
Vulnerability identifier: #VU7331
Vulnerability risk: High
CVE-ID: CVE-2017-3241
CWE-ID: CWE-264
Exploitation vector: Remote access
Vulnerable software:
JRockit
Oracle Java SE
JRockit
Oracle Java SE
Link to public exploit:
Vulnerability description
The vulnerability allows a remote unauthenticated attacker to execute arbitrary code.
The weakness exists due to unknown error in Oracle Java SE Java SE Embedded and Jrockit related to the RMI component. A remote attacker can execute arbitrary code with privileges of the current user and compromise vulnerable system.
The weakness exists due to unknown error in Oracle Java SE Java SE Embedded and Jrockit related to the RMI component. A remote attacker can execute arbitrary code with privileges of the current user and compromise vulnerable system.
Remediation
Install update from vendor's website.