PT-2013-3804 · Oracle+4 · Java Se+6

Publicado

2013-06-18

·

Atualizado

2024-06-15

·

CVE-2013-2470

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 21 Java SE versions prior to 6 Update 45 Java SE versions prior to 5.0 Update 45 OpenJDK 7
Description The issue affects the confidentiality, integrity, and availability of the system, related to 2D processing. It is reported that remote attackers may be able to bypass the Java sandbox via vectors related to ImagingLib byte lookup processing. The estimated number of potentially affected devices is not specified.
Recommendations For Java SE versions prior to 7 Update 21, update to a version newer than 7 Update 21. For Java SE versions prior to 6 Update 45, update to a version newer than 6 Update 45. For Java SE versions prior to 5.0 Update 45, update to a version newer than 5.0 Update 45. For OpenJDK 7, consider disabling the ImagingLib component until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CESA-2013_0957
CESA-2013_1014
CVE-2013-2470
DSA-2722-1
DSA-2727-1
HPSBUX02907
HPSBUX02908
HPSBUX02922
MGASA-2013-0185
MGASA-2013-0208
OPENSUSE-SU-2024:10534-1
RHSA-2013:0957
RHSA-2013:0958
RHSA-2013:0963
RHSA-2013:1014
RHSA-2013:1059
RHSA-2013:1060
RHSA-2013:1081
RHSA-2013:1455
RHSA-2013:1456
RHSA-2013_0957
RHSA-2013_0958
RHSA-2013_0963
RHSA-2013_1014
RHSA-2013_1059
RHSA-2013_1060
RHSA-2013_1081
RHSA-2014:0414
RHSA-2014_0414
ZDI-13-158

Produtos afetados

Centos
Hp-Ux
Java Platform
Java Se
Openjdk
Red Hat
Suse