PT-2013-3796 · Oracle+3 · Java Runtime Environment+5

Publicado 2013-06-18 · Atualizado 2017-09-19 · CVE-2013-2462

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 21 Java Runtime Environment (JRE) versions prior to 7 Update 21

Description The issue affects confidentiality, integrity, and availability. It is related to the Deployment component in the Java Runtime Environment. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Java SE versions prior to 7 Update 21, update to a version newer than 7 Update 21. For Java Runtime Environment (JRE) versions prior to 7 Update 21, update to a version newer than 7 Update 21.

Exploit

Correção

Identificadores relacionados

CVE-2013-2462

HPSBUX02907

RHSA-2013:0963

RHSA-2013:1060

RHSA-2013_0963

RHSA-2013_1060

Produtos afetados

Hp-Ux

Java Platform

Java Runtime Environment

Java Se

Red Hat

Suse

Referências · 107

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• https://access.redhat.com/security/cve/CVE-2013-2468 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2458 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-2454 · Nota
• https://access.redhat.com/security/cve/CVE-2013-3011 · Nota
• https://access.redhat.com/security/cve/CVE-2013-4002 · Nota
• https://oracle.com/security-alerts/javacpujun2013verbose.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-2460 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-2462 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412 · Nota de Segurança