PT-2013-4585 · Oracle+3 · Java Se+4

Published 2013-06-18 · Updated 2017-11-18 · CVE-2013-3744

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 21

Description The issue affects the integrity of the system due to an unspecified vulnerability in the Java Runtime Environment component. This vulnerability is related to the Deployment component.

Recommendations For versions prior to 7 Update 21, update to a version later than 7 Update 21 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2013-3744

HPSBUX02907

RHSA-2013:0963

RHSA-2013:1060

RHSA-2013_0963

RHSA-2013_1060

Affected Products

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

References · 108

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2437 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2460 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465 · Security Note