CVE-2013-2422

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 17 and earlier Oracle Java SE versions 6 Update 43 and earlier OpenJDK versions 6 and 7

Description The issue affects confidentiality, integrity, and availability via unknown vectors related to Libraries. It is reportedly related to improper method-invocation restrictions, potentially allowing remote attackers to bypass the Java sandbox.

Recommendations For Oracle Java SE versions 7 Update 17 and earlier, update to a version later than Update 17. For Oracle Java SE versions 6 Update 43 and earlier, update to a version later than Update 43. For OpenJDK versions 6 and 7, consider disabling the MethodUtil trampoline class as a temporary workaround until a patch is available.