PT-2013-3751 · Oracle+1 · Java Se+2

Published 2013-04-17 · Updated 2017-09-19 · CVE-2013-2416

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 17

Description The issue affects the integrity of the system, related to the Deployment component in the Java Runtime Environment. The exact vectors of the issue are not specified.

Recommendations For Java SE versions prior to 7 Update 17, update to a version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2013-2416

RHSA-2013:0757

RHSA-2013:0822

RHSA-2013_0757

RHSA-2013_0822

Affected Products

Java Platform

Java Se

Red Hat

References · 62

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_driver_manager.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_reflection_types.rb · Exploit
• 🔥 https://github.com/guhe120/CVE20131491-JIT · Exploit
• 🔥 https://github.com/v-p-b/buherablog-cve-2013-1488 · Exploit
• 🔥 https://exploit-db.com/exploits/24966 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2416 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-0757.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03796 · Security Note
• https://bdu.fstec.ru/vul/2015-09702 · Security Note
• http://oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html · Vendor Advisory
• http://us-cert.gov/ncas/alerts/TA13-107A · Note
• https://access.redhat.com/security/cve/CVE-2013-1564 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16464 · Note
• https://access.redhat.com/errata/RHSA-2013:0757 · Note
• https://access.redhat.com/security/cve/CVE-2013-2416 · Note