PT-2013-3790 · Openjdk+5 · Openjdk+6

Stefan Cornelius

·

Publicado

2013-06-18

·

Atualizado

2024-06-15

·

CVE-2013-2456

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 21 and earlier Oracle Java SE versions 6 Update 45 and earlier Oracle Java SE versions 5.0 Update 45 and earlier OpenJDK 7
Description The issue affects confidentiality via unknown vectors related to Serialization. It is noted that the problem might be related to improper access checks for subclasses in the ObjectOutputStream class, but this has not been confirmed by Oracle.
Recommendations For Oracle Java SE versions 7 Update 21 and earlier, update to a version later than Update 21. For Oracle Java SE versions 6 Update 45 and earlier, update to a version later than Update 45. For Oracle Java SE versions 5.0 Update 45 and earlier, update to a version later than Update 45. For OpenJDK 7, consider disabling the Serialization functionality until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CESA-2013_0957
CESA-2013_1014
CVE-2013-2456
DSA-2722-1
DSA-2727-1
HPSBUX02907
HPSBUX02908
HPSBUX02922
MGASA-2013-0185
MGASA-2013-0208
OPENSUSE-SU-2024:10534-1
RHSA-2013:0957
RHSA-2013:0958
RHSA-2013:0963
RHSA-2013:1014
RHSA-2013:1059
RHSA-2013:1060
RHSA-2013:1081
RHSA-2013:1455
RHSA-2013:1456
RHSA-2013_0957
RHSA-2013_0958
RHSA-2013_0963
RHSA-2013_1014
RHSA-2013_1059
RHSA-2013_1060
RHSA-2013_1081
RHSA-2014:0414
RHSA-2014_0414

Produtos afetados

Centos
Hp-Ux
Java Platform
Java Se
Openjdk
Red Hat
Suse