PT-2013-3742 · Openjdk+5 · Openjdk+6

Stefan Cornelius

·

Publicado

2013-06-18

·

Atualizado

2024-06-15

·

CVE-2013-2407

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:P
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 21 and earlier Oracle Java SE versions 6 Update 45 and earlier OpenJDK 7
Description The issue affects confidentiality and availability, and is related to unknown vectors in the Libraries component of the Java Runtime Environment. There are claims that this issue may be related to XML security and the class loader, although Oracle has not commented on this.
Recommendations For Oracle Java SE versions 7 Update 21 and earlier, update to a version later than Update 21. For Oracle Java SE versions 6 Update 45 and earlier, update to a version later than Update 45. For OpenJDK 7, consider disabling the use of Libraries until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CESA-2013_0957
CESA-2013_1014
CVE-2013-2407
DSA-2722-1
DSA-2727-1
HPSBUX02907
HPSBUX02908
MGASA-2013-0185
MGASA-2013-0208
OPENSUSE-SU-2024:10534-1
RHSA-2013:0957
RHSA-2013:0958
RHSA-2013:0963
RHSA-2013:1014
RHSA-2013:1059
RHSA-2013:1060
RHSA-2013:1455
RHSA-2013:1456
RHSA-2013_0957
RHSA-2013_0958
RHSA-2013_0963
RHSA-2013_1014
RHSA-2013_1059
RHSA-2013_1060
RHSA-2014:0414
RHSA-2014_0414

Produtos afetados

Centos
Hp-Ux
Java Platform
Java Se
Openjdk
Red Hat
Suse