PT-2013-3798 · Oracle+3 · Oracle Jdk+7

Publicado 2013-06-18 · Atualizado 2022-05-13 · CVE-2013-2464

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle JDK (affected versions not specified) Oracle JRE (affected versions not specified) Sun JDK (affected versions not specified) Sun JRE (affected versions not specified)

Description The issue is related to a memory corruption remote code execution problem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2013-2464

HPSBUX02907

HPSBUX02908

HPSBUX02922

RHSA-2013:0963

RHSA-2013:1059

RHSA-2013:1060

RHSA-2013:1081

RHSA-2013:1455

RHSA-2013:1456

RHSA-2013_0963

RHSA-2013_1059

RHSA-2013_1060

RHSA-2013_1081

RHSA-2014:0414

RHSA-2014_0414

ZDI-13-157

Produtos afetados

Hp-Ux

Java Platform

Oracle Jdk

Oracle Jre

Red Hat

Sun Jdk

Sun Jre

Suse

Referências · 339

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• 🔥 https://github.com/guhe120/CVE20131491-JIT · Exploit
• https://bdu.fstec.ru/vul/2015-00016 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-2468 · Nota
• https://access.redhat.com/security/cve/CVE-2013-5789 · Nota
• https://bdu.fstec.ru/vul/2014-00485 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2432 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00029 · Nota de Segurança
• https://oracle.com/security-alerts/javacpujun2013verbose.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-2460 · Nota
• https://bdu.fstec.ru/vul/2014-00435 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-0452 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453 · Nota de Segurança