CVE-2017-10096 log
| Source |
|
| Severity | Critical |
| Remote | Yes |
| Type | Access restriction bypass |
| Description | It was discovered that the implementation of the TransformerException class in the JAXP component of OpenJDK failed to properly perform access control checks, related to handling of the DTM exceptions. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-380 | jdk7-openjdk | 7.u131_2.6.9-1 | 7.u151_2.6.11-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 12 Aug 2017 | ASA-201708-8 | AVG-380 | jdk7-openjdk | Critical | multiple issues |
| References |
|---|
http://hg.openjdk.java.net/jdk8u/jdk8u/jaxp/rev/510b8c8dfdd6 |