CVE-2013-1557

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 17 and earlier Java SE versions 6 Update 43 and earlier Java SE versions 5.0 Update 41 and earlier OpenJDK versions 6 and 7

Description The issue affects the Java Runtime Environment (JRE) component, allowing remote attackers to impact confidentiality, integrity, and availability through vectors related to RMI. It is noted that this problem might be related to "missing security restrictions" in the LogStream.setDefaultStream method, although Oracle has not commented on these claims.

Recommendations For Java SE versions 7 Update 17 and earlier, update to a version later than Update 17. For Java SE versions 6 Update 43 and earlier, update to a version later than Update 43. For Java SE versions 5.0 Update 41 and earlier, update to a version later than Update 41. For OpenJDK versions 6 and 7, consider disabling the RMI functionality until a patch is available.