CVE-2013-2472

Oracle Java - 'ShortComponentRaster.verify()' Memory Corruption

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2013-2472 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBOracle Java - 'ShortComponentRaster.verify()' Memory CorruptionExploitDB exploitby Packet StormNot analyzed1 file
ExploitDB
PoC details

References

Showing 12 of 32