PT-2013-3803
CVE-2013-2469
·
تاريخ النشر
2013-06-18
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 7 Update 21 and earlier
Oracle Java SE versions 6 Update 45 and earlier
Oracle Java SE versions 5.0 Update 45 and earlier
OpenJDK version 7
Description
The issue affects confidentiality, integrity, and availability via unknown vectors related to 2D. It may allow remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Recommendations
For Oracle Java SE versions 7 Update 21 and earlier, update to a version later than Update 21.
For Oracle Java SE versions 6 Update 45 and earlier, update to a version later than Update 45.
For Oracle Java SE versions 5.0 Update 45 and earlier, update to a version later than Update 45.
For OpenJDK version 7, consider disabling the 2D component until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾