PT-2013-3803
CVE-2013-2469
·
Publicado
2013-06-18
·
Atualizado
2024-06-15
Descrição por
CVSS 2.0
10
AltaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 7 Update 21 and earlier
Oracle Java SE versions 6 Update 45 and earlier
Oracle Java SE versions 5.0 Update 45 and earlier
OpenJDK version 7
Description
The issue affects confidentiality, integrity, and availability via unknown vectors related to 2D. It may allow remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Recommendations
For Oracle Java SE versions 7 Update 21 and earlier, update to a version later than Update 21.
For Oracle Java SE versions 6 Update 45 and earlier, update to a version later than Update 45.
For Oracle Java SE versions 5.0 Update 45 and earlier, update to a version later than Update 45.
For OpenJDK version 7, consider disabling the 2D component until a patch is available.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾