CVE-2013-2444

Oracle Java SE <7 Update 21,6 Update 45,5.0 Update 45 - DoS

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.

References (29)

Core 29
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1060.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1455.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1059.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1081.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0963.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1456.html
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2014:0414
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16851
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54154
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19602
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/ncas/alerts/TA13-169A
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19476
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19307
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:183
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21642336
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=137545592101387&w=2
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201406-32.xml
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=137545505800971&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/60633
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=975131
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2013-0185.html

Scores

EPSS 0.0491
EPSS Percentile 89.7%

Details

Status published
Products (16)
oracle/javafx 2.0
oracle/javafx 2.0.2
oracle/javafx 2.0.3
oracle/javafx 2.1
oracle/javafx 2.2
oracle/javafx 2.2.3
oracle/javafx 2.2.4
oracle/javafx 2.2.5
oracle/javafx 2.2.7
oracle/javafx < 2.2.21
... and 6 more
Published Jun 18, 2013
Tracked Since Feb 18, 2026