CVE-2013-2472

Oracle Java SE <7u21,6u45,5u45 - Info Disclosure

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.

Exploits (1)

exploitdb WRITEUP
by Packet Storm · textremotewindows
https://www.exploit-db.com/exploits/28331

References (31)

Core 31
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1060.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1455.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1059.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1081.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0963.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1456.html
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2014:0414
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/ncas/alerts/TA13-169A
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2013-0185.html
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=137545592101387&w=2
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201406-32.xml
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18742
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=137545505800971&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54154
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19543
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/60656
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16712
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18846
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=975107
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:183
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21642336

Scores

EPSS 0.5441
EPSS Percentile 98.0%

Details

Status published
Products (6)
oracle/jdk 1.7.0 (14 CPE variants)
oracle/jdk 1.6.0 update22 (18 CPE variants)
oracle/jdk 1.5.0 update36 (5 CPE variants)
oracle/jdk < 1.6.0
oracle/jdk < 1.7.0
oracle/jre 1.7.0 (11 CPE variants)
Published Jun 18, 2013
Tracked Since Feb 18, 2026