Skip to content
Sign in
7.2 High

CVE-2019-4732 IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through…

Description

IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By placing a specially-crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 172618.

Affected products and versions

Product Affected versions Fixed in
Java 8.0 8.0.0.0 → 8.0.6.0 No fix stated
Java 7.1 7.1.0.0 → 7.1.4.55 No fix stated
Java 7.0 7.0.0.0 → 7.0.10.55 No fix stated

Other CVEs of Java

The 3 CVEs of Java →
CVE-2023-30441 IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose… 7.5 High CVE-2019-4473 Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs,… 8.4 High
Track this CVE