PT-2013-3798 · Oracle+3 · Oracle Jdk+7

Published 2013-06-18 · Updated 2022-05-13 · CVE-2013-2464

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle JDK (affected versions not specified) Oracle JRE (affected versions not specified) Sun JDK (affected versions not specified) Sun JRE (affected versions not specified)

Description The issue is related to a memory corruption remote code execution problem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2013-2464

HPSBUX02907

HPSBUX02908

HPSBUX02922

RHSA-2013:0963

RHSA-2013:1059

RHSA-2013:1060

RHSA-2013:1081

RHSA-2013:1455

RHSA-2013:1456

RHSA-2013_0963

RHSA-2013_1059

RHSA-2013_1060

RHSA-2013_1081

RHSA-2014:0414

RHSA-2014_0414

ZDI-13-157

Affected Products

Hp-Ux

Java Platform

Oracle Jdk

Oracle Jre

Red Hat

Sun Jdk

Sun Jre

Suse

References · 339

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• 🔥 https://github.com/guhe120/CVE20131491-JIT · Exploit
• https://bdu.fstec.ru/vul/2015-00016 · Security Note
• https://bdu.fstec.ru/vul/2014-00485 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2432 · Security Note
• https://bdu.fstec.ru/vul/2015-00029 · Security Note
• https://bdu.fstec.ru/vul/2014-00435 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453 · Security Note
• https://access.redhat.com/errata/RHSA-2014:0414 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00007 · Security Note
• https://bdu.fstec.ru/vul/2015-00026 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2460 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419 · Security Note