PT-2013-3801 · Oracle+1 · Java Se+2

Publicado 2013-06-18 · Atualizado 2022-05-13 · CVE-2013-2467

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 5.0 Update 45

Description The issue affects confidentiality, integrity, and availability. It is related to the Java installer in the Java Runtime Environment component. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions prior to 5.0 Update 45, update to a version that contains the fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2013-2467

HPSBUX02907

Produtos afetados

Hp-Ux

Java Platform

Java Se

Referências · 54

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17014 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2462 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2457 · Nota de Segurança
• http://secunia.com/advisories/54154 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2013-2467 · Nota de Segurança
• http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2452 · Nota de Segurança
• https://oracle.com/security-alerts/javacpujun2013verbose.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2470 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2461 · Nota de Segurança