Published: 17/04/2013 Updated: 19/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and previous versions, and OpenJDK 6 and 7, allows remote malicious users to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to bypassing the Java sandbox using "method handle intrinsic frames."

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle jre 1.7.0
oracle jre
oracle jdk 1.7.0
oracle jdk

Synopsis Important: java-160-openjdk security update Type/Severity Security Advisory: Important Topic Updated java-160-openjdk packages that fix various security issues arenow available for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as havingimportant secur ...

Synopsis Important: java-170-openjdk security update Type/Severity Security Advisory: Important Topic Updated java-170-openjdk packages that fix various security issues arenow available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security im ...

Synopsis Critical: java-170-oracle security update Type/Severity Security Advisory: Critical Topic Updated java-170-oracle packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having crit ...

Synopsis Critical: java-170-openjdk security update Type/Severity Security Advisory: Critical Topic Updated java-170-openjdk packages that fix various security issues arenow available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having criticalsecurity impac ...

Several security issues were fixed in OpenJDK 6 ...

Several security issues were fixed in OpenJDK 7 ...

Multiple flaws were discovered in the font layout engine in the 2D component An untrusted Java application or applet could possibly use these flaws to trigger Java Virtual Machine memory corruption (CVE-2013-1569, CVE-2013-2383, CVE-2013-2384) Multiple improper permission check issues were discovered in the Beans, Libraries, JAXP, and RMI compone ...

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot NOTE: the previous information is from the April 2013 CPU Oracle has not commented on claim ...

NVD-CWE-noinfo http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html https://bugzilla.redhat.com/show_bug.cgi?id=952645 http://rhn.redhat.com/errata/RHSA-2013-0752.html http://www.ubuntu.com/usn/USN-1806-1 http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/http://rhn.redhat.com/errata/RHSA-2013-0757.html http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/c954aab38a7f http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html http://www.us-cert.gov/ncas/alerts/TA13-107A http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html http://security.gentoo.org/glsa/glsa-201406-32.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16410 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2013:0770 https://usn.ubuntu.com/1819-1/https://access.redhat.com/security/cve/cve-2013-2431

Get Started

CVE-2013-2431

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect