---
title: "CVE-2014-0387\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2014-0387?format=md
keywords: index, follow
---

# CVE-2014-0387

Publication date 15 January 2014

Last updated 24 July 2024

---

Ubuntu priority

**High**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when
running on Firefox, allows remote attackers to affect confidentiality,
integrity, and availability via unknown vectors related to Deployment.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2014-0387?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| openjdk-6 | 13.10 saucy | Not affected |
| 13.04 raring | Not affected |
| 12.10 quantal | Not affected |
| 12.04 LTS precise | Not affected |
| 10.04 LTS lucid | Not affected |
| openjdk-7 | 13.10 saucy | Not affected |
| 13.04 raring | Not affected |
| 12.10 quantal | Not affected |
| 12.04 LTS precise | Not affected |
| 10.04 LTS lucid | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [mdeslaur](https://launchpad.net/~mdeslaur)

in lucid+, NetX and the plugin moved to the icedtea-web package

---

### [jdstrand](https://launchpad.net/~jdstrand)

sun-java6 is not redistributable, no longer in the archive and
no longer tracked
sun-java5 is EOL upstream and no longer tracked
Oracle SE on Firefox

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0387)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-0387)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-0387)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2014-0387)

### Other references

* <http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html>
* <https://www.cve.org/CVERecord?id=CVE-2014-0387>
