PT-2013-3785

CVE-2013-2451

·

Publicado

2013-06-18

·

Atualizado

2024-06-15

Descrição por

CVSS 2.0
3.7
Baixa
MétricasAV:L/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 21 and earlier Oracle Java SE versions 6 Update 45 and earlier OpenJDK 7
Description The issue affects the Java Runtime Environment component, allowing local users to impact confidentiality, integrity, and availability through unknown vectors related to Networking. There are claims that this issue may be related to improper enforcement of exclusive port binds when running on Windows, potentially allowing attackers to bind to ports that are already in use.
Recommendations For Oracle Java SE versions 7 Update 21 and earlier, update to a version later than Update 21. For Oracle Java SE versions 6 Update 45 and earlier, update to a version later than Update 45. For OpenJDK 7, consider restricting network access until a patch is available.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
DSA-2722-1
DSA-2727-1
HPSBUX02908
MGASA-2013-0208
OPENSUSE-SU-2024:10534-1
RHSA-2013:0963
RHSA-2013_0963
RHSA-2013:1059
RHSA-2013_1059
RHSA-2013:1060
RHSA-2013_1060
RHSA-2013:1455
RHSA-2013:1456
RHSA-2014:0414
RHSA-2014_0414
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾