PT-2013-2343 · Oracle+1 · Java Se+2

Publicado 2013-02-01 · Atualizado 2017-09-19 · CVE-2013-0448

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 Update 11 Oracle Java SE 7 through Update 11

Description The issue affects the Java Runtime Environment component, allowing remote attackers to impact integrity through unknown vectors related to Libraries.

Recommendations For Oracle Java SE versions prior to 7 Update 11, update to a version later than Update 11 to resolve the issue. For Oracle Java SE 7 through Update 11, update to a version later than Update 11 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2013-0448

RHSA-2013:0237

RHSA-2013_0237

Produtos afetados

Java Platform

Java Se

Red Hat

Referências · 54

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jmxbean_2.rb · Exploit
• http://us-cert.gov/cas/techalerts/TA13-032A.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-0445 · Nota
• https://access.redhat.com/security/cve/CVE-2012-1541 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0441 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0435 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0448 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0446 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0351 · Nota
• https://access.redhat.com/security/cve/CVE-2013-1489 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0443 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0419 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0440 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0442 · Nota
• https://access.redhat.com/security/cve/CVE-2013-0444 · Nota