CVE-2013-2439

Oracle Java SE <7.17, 6.<43>, 5.0.<41> - Info Disclosure

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.

References (9)

Core 9
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/ncas/alerts/TA13-107A
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19541
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19473
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0758.html
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=137283787217316&w=2
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0757.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/59178

Scores

EPSS 0.0010
EPSS Percentile 27.4%

Details

Status published
Products (16)
oracle/javafx 2.0
oracle/javafx 2.0.2
oracle/javafx 2.0.3
oracle/javafx 2.1
oracle/javafx 2.2
oracle/javafx 2.2.3
oracle/javafx 2.2.4
oracle/javafx 2.2.5
oracle/javafx < 2.2.7
oracle/jdk 1.7.0 (13 CPE variants)
... and 6 more
Published Apr 17, 2013
Tracked Since Feb 18, 2026