PT-2013-3754 · Openjdk+7 · Openjdk+8

Publicado 2013-04-17 · Atualizado 2024-06-15 · CVE-2013-2419

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 Update 18 Oracle Java SE versions prior to 6 Update 44 Oracle Java SE versions prior to 5.0 Update 42 OpenJDK versions 6 and 7

Description The issue allows remote attackers to affect availability via unknown vectors related to 2D. There are claims from another vendor that this issue is related to font processing errors in the International Components for Unicode (ICU) Layout Engine before 51.2.

Recommendations For Oracle Java SE versions prior to 7 Update 18, update to version 7 Update 18 or later. For Oracle Java SE versions prior to 6 Update 44, update to version 6 Update 44 or later. For Oracle Java SE versions prior to 5.0 Update 42, update to version 5.0 Update 42 or later. For OpenJDK versions 6 and 7, consider upgrading to a newer version that may include fixes for this issue, as specific guidance for OpenJDK is not provided.

Exploit

Correção

Identificadores relacionados

CESA-2013_0751

CESA-2013_0770

CVE-2013-2419

DLA-219-1

DSA-3187-1

HPSBUX02889

HPSBUX02922

OPENSUSE-SU-2024:10534-1

RHSA-2013:0751

RHSA-2013:0752

RHSA-2013:0757

RHSA-2013:0758

RHSA-2013:0770

RHSA-2013:0822

RHSA-2013:0823

RHSA-2013:0855

RHSA-2013:1455

RHSA-2013:1456

RHSA-2013_0751

RHSA-2013_0752

RHSA-2013_0757

RHSA-2013_0758

RHSA-2013_0770

RHSA-2013_0822

RHSA-2013_0823

RHSA-2013_0855

SUSE-SU-2015:0343-1

SUSE-SU-2015:0344-1

SUSE-SU-2015:0392-1

SUSE-SU-2015:1086-1

SUSE-SU-2015:1086-2

SUSE-SU-2015:1086-3

SUSE-SU-2015:1086-4

USN-1806-1

USN-1819-1

USN-2522-1

USN-2522-3

Produtos afetados

Centos

Hp-Ux

International Components For Unicode (Icu) Layout Engine

Java Platform

Java Se

Openjdk

Red Hat

Suse

Ubuntu

Referências · 509

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_driver_manager.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_reflection_types.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• 🔥 https://github.com/guhe120/CVE20131491-JIT · Exploit
• 🔥 https://github.com/v-p-b/buherablog-cve-2013-1488 · Exploit
• 🔥 https://exploit-db.com/exploits/24966 · Exploit
• https://suse.com/security/cve/CVE-2013-5820 · Nota
• https://suse.com/security/cve/CVE-2012-5070 · Nota
• https://suse.com/security/cve/CVE-2015-0477 · Nota
• https://ubuntu.com/security/CVE-2014-6591 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-5582 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1558 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2013-April/031741.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2470 · Nota de Segurança
• https://suse.com/security/cve/CVE-2013-4002 · Nota