PT-2013-4092 · Ibm+2 · Ibm Java 7+2

Adam Gowdiak · Publicado 2013-07-15 · Atualizado 2017-08-29 · CVE-2013-3008

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Java 7 versions prior to 7 SR5

Description The issue affects the confidentiality, availability, and integrity of the system, but the specific vectors used by remote attackers are unknown.

Recommendations For IBM Java 7 versions prior to 7 SR5, update to version 7 SR5 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2013-3008

RHSA-2013:1060

RHSA-2013_1060

Produtos afetados

Ibm Java 7

Red Hat

Suse

Referências · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84149 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2468 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2459 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2458 · Nota
• https://access.redhat.com/security/cve/CVE-2013-3010 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2444 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2442 · Nota
• http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01 · Nota
• https://access.redhat.com/security/cve/CVE-2013-3009 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2454 · Nota
• https://access.redhat.com/security/cve/CVE-2013-3011 · Nota
• https://access.redhat.com/security/cve/CVE-2013-4002 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2460 · Nota