PT-2013-4090 · Ibm+2 · Ibm Java 7+2

Published 2013-07-15 · Updated 2017-08-29 · CVE-2013-3006

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Java 7 versions prior to 7 SR5

Description The issue affects confidentiality, availability, and integrity. It can be exploited by remote attackers via unknown vectors.

Recommendations For IBM Java 7 versions prior to 7 SR5, update to version 7 SR5 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2013-3006

RHSA-2013:1060

RHSA-2013_1060

Affected Products

Ibm Java 7

Red Hat

Suse

References · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• http://www-01.ibm.com/support/docview.wss?uid=swg21644197 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1060.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-3006 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21642336 · Vendor Advisory
• http://secunia.com/advisories/54154 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV44790 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2013-2468 · Note
• https://access.redhat.com/security/cve/CVE-2013-2459 · Note
• https://access.redhat.com/security/cve/CVE-2013-2458 · Note
• https://access.redhat.com/security/cve/CVE-2013-3010 · Note
• https://access.redhat.com/security/cve/CVE-2013-2444 · Note