PT-2014-2986 · Oracle+6 · Oracle Java Se+8
Publicado
2014-01-15
·
Atualizado
2024-06-15
·
CVE-2013-5896
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 5.0u55, 6u65, and 7u45
Java SE Embedded version 7u45
OpenJDK version 7u45
Description
The issue affects availability and is related to vectors in the CORBA component, allowing remote attackers to exploit it. It is noted that the
com.sun.corba.se package and its sub-packages may not be included on the restricted package list, although Oracle has not commented on this claim.Recommendations
For Oracle Java SE versions 5.0u55, 6u65, and 7u45, update to a version that is not affected by this issue.
For Java SE Embedded version 7u45, update to a version that is not affected by this issue.
For OpenJDK version 7u45, update to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to the CORBA component until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Hp-Ux
Ibm Aix
Java Platform
Java Se Embedded
Openjdk
Oracle Java Se
Red Hat
Suse