PT-2013-3796 · Oracle+3 · Java Runtime Environment+5

Published 2013-06-18 · Updated 2017-09-19 · CVE-2013-2462

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 21 Java Runtime Environment (JRE) versions prior to 7 Update 21

Description The issue affects confidentiality, integrity, and availability. It is related to the Deployment component in the Java Runtime Environment. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Java SE versions prior to 7 Update 21, update to a version newer than 7 Update 21. For Java Runtime Environment (JRE) versions prior to 7 Update 21, update to a version newer than 7 Update 21.

Exploit

Fix

Related Identifiers

CVE-2013-2462

HPSBUX02907

RHSA-2013:0963

RHSA-2013:1060

RHSA-2013_0963

RHSA-2013_1060

Affected Products

Hp-Ux

Java Platform

Java Runtime Environment

Java Se

Red Hat

Suse

References · 107

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2437 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2460 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465 · Security Note