Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an invalid type cast in the JSObject class.
| Software | From | Fixed in |
|---|---|---|
| oracle / javafx | - | 2.2.4.x |
| oracle / javafx | 2.0.3 | 2.0.3.x |
| oracle / javafx | 2.0 | 2.0.x |
| oracle / javafx | 2.1 | 2.1.x |
| oracle / javafx | 2.2 | 2.2.x |
| oracle / javafx | 2.0.2 | 2.0.2.x |
| oracle / javafx | 2.2.3 | 2.2.3.x |