10
CVSSv2

CVE-2013-0809

Published: 05/03/2013 Updated: 07/11/2023
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and previous versions, 6 Update 41 and previous versions, and 5.0 Update 40 and previous versions allows remote malicious users to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493.

Vulnerable Product Search on Vulmon Subscribe to Product

sun jre 1.6.0

oracle jre 1.6.0

oracle jre

sun jdk 1.6.0

oracle jdk 1.6.0

oracle jdk

sun jre 1.5.0

oracle jre 1.5.0

sun jdk 1.5.0

oracle jdk 1.5.0

oracle jre 1.7.0

oracle jdk 1.7.0

Vendor Advisories

OpenJDK could be made to crash or run programs as your login if it opened a specially crafted file ...
OpenJDK could be made to crash or run programs as your login if it opened a specially crafted file ...
Synopsis Critical: java-160-openjdk security update Type/Severity Security Advisory: Critical Topic Updated java-160-openjdk packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact C ...
Synopsis Important: java-170-openjdk security update Type/Severity Security Advisory: Important Topic Updated java-170-openjdk packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security impact ...
Synopsis Critical: java-150-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-150-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalse ...
Synopsis Critical: java-160-sun security update Type/Severity Security Advisory: Critical Topic Updated java-160-sun packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalsecuri ...
Synopsis Critical: java-170-openjdk security update Type/Severity Security Advisory: Critical Topic Updated java-170-openjdk packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact C ...
Synopsis Critical: java-160-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalse ...
Synopsis Critical: java-170-oracle security update Type/Severity Security Advisory: Critical Topic Updated java-170-oracle packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having critical ...
Synopsis Important: java-160-openjdk security update Type/Severity Security Advisory: Important Topic Updated java-160-openjdk packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security impact ...
Synopsis Low: Red Hat Network Satellite server IBM Java Runtime security update Type/Severity Security Advisory: Low Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Network Satellite Server 55The Red Hat Security Response Team has rated this update as ha ...
Synopsis Critical: java-170-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-170-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalse ...
Synopsis Low: Red Hat Network Satellite server IBM Java Runtime security update Type/Severity Security Advisory: Low Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Network Satellite Server 54The Red Hat Security Response Team has rated this update as ha ...
An integer overflow flaw was found in the way the 2D component handled certain sample model instances A specially-crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges (CVE-2013-0809) It was discovered that the 2D component did not properly ...
An integer overflow flaw was found in the way the 2D component handled certain sample model instances A specially-crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges (CVE-2013-0809) It was discovered that the 2D component did not properly ...

References

NVD-CWE-noinfohttp://www.ubuntu.com/usn/USN-1755-2http://rhn.redhat.com/errata/RHSA-2013-0601.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0604.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0603.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-03/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-03/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-03/msg00012.htmlhttp://www.us-cert.gov/ncas/alerts/TA13-064Ahttp://marc.info/?l=bugtraq&m=136439120408139&w=2http://marc.info/?l=bugtraq&m=136570436423916&w=2http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1455.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1456.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.htmlhttp://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.htmlhttp://www.kb.cert.org/vuls/id/688246http://www.mandriva.com/security/advisories?name=MDVSA-2013:095https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0088http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://www.securityfocus.com/bid/58296https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19479https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19320https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19076http://www.oracle.com/ocom/groups/public/%40otn/documents/webcontent/1915099.xmlhttps://nvd.nist.govhttps://usn.ubuntu.com/1755-1/https://www.kb.cert.org/vuls/id/688246