PT-2013-4092 · Ibm+2 · Ibm Java 7+2

Adam Gowdiak · Published 2013-07-15 · Updated 2017-08-29 · CVE-2013-3008

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Java 7 versions prior to 7 SR5

Description The issue affects the confidentiality, availability, and integrity of the system, but the specific vectors used by remote attackers are unknown.

Recommendations For IBM Java 7 versions prior to 7 SR5, update to version 7 SR5 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2013-3008

RHSA-2013:1060

RHSA-2013_1060

Affected Products

Ibm Java 7

Red Hat

Suse

References · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• http://www-01.ibm.com/support/docview.wss?uid=swg21644197 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1060.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html · Vendor Advisory
• http://secunia.com/advisories/54154 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV44791 · Vendor Advisory
• http://ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_July_2013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-3008 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84149 · Note
• https://access.redhat.com/security/cve/CVE-2013-2468 · Note
• https://access.redhat.com/security/cve/CVE-2013-2459 · Note
• https://access.redhat.com/security/cve/CVE-2013-2458 · Note
• https://access.redhat.com/security/cve/CVE-2013-3010 · Note