PT-2013-3772 · Oracle+1 · Java Se+4

Published 2013-04-17 · Updated 2017-09-19 · CVE-2013-2438

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 Update 17

Description The issue affects the integrity of the system due to an unspecified vulnerability in the Java Runtime Environment (JRE) component, related to JavaFX.

Recommendations For Oracle Java SE versions prior to 7 Update 17, update to a version newer than 7 Update 17 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2013-2438

RHSA-2013:0757

RHSA-2013:0822

RHSA-2013_0757

RHSA-2013_0822

Affected Products

Java Platform

Java Runtime Environment

Java Se

Javafx

Red Hat

References · 61

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_driver_manager.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_reflection_types.rb · Exploit
• 🔥 https://github.com/guhe120/CVE20131491-JIT · Exploit
• 🔥 https://github.com/v-p-b/buherablog-cve-2013-1488 · Exploit
• http://rhn.redhat.com/errata/RHSA-2013-0757.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03796 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-2438 · Security Note
• https://bdu.fstec.ru/vul/2015-09702 · Security Note
• http://oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html · Vendor Advisory
• http://us-cert.gov/ncas/alerts/TA13-107A · Note
• https://access.redhat.com/security/cve/CVE-2013-1564 · Note
• https://access.redhat.com/security/cve/CVE-2013-2416 · Note
• https://access.redhat.com/errata/RHSA-2013:0757 · Note
• https://access.redhat.com/security/cve/CVE-2013-1540 · Note
• https://access.redhat.com/security/cve/CVE-2013-2424 · Note