PT-2013-3772 · Oracle+1 · Java Se+4

Publicado 2013-04-17 · Atualizado 2017-09-19 · CVE-2013-2438

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 Update 17

Description The issue affects the integrity of the system due to an unspecified vulnerability in the Java Runtime Environment (JRE) component, related to JavaFX.

Recommendations For Oracle Java SE versions prior to 7 Update 17, update to a version newer than 7 Update 17 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2013-2438

RHSA-2013:0757

RHSA-2013:0822

RHSA-2013_0757

RHSA-2013_0822

Produtos afetados

Java Platform

Java Runtime Environment

Java Se

Javafx

Red Hat

Referências · 61

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_driver_manager.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_reflection_types.rb · Exploit
• 🔥 https://github.com/guhe120/CVE20131491-JIT · Exploit
• 🔥 https://github.com/v-p-b/buherablog-cve-2013-1488 · Exploit
• http://us-cert.gov/ncas/alerts/TA13-107A · Nota
• https://access.redhat.com/security/cve/CVE-2013-1564 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2416 · Nota
• https://access.redhat.com/errata/RHSA-2013:0757 · Nota
• https://access.redhat.com/security/cve/CVE-2013-1540 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2424 · Nota
• https://oracle.com/security-alerts/javacpuapr2013.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-2383 · Nota
• https://doc.ic.ac.uk/~livshits/classes/CO445H/reading/java-trouble.pdf · Nota
• https://access.redhat.com/security/cve/CVE-2013-2431 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2414 · Nota