CVE-2013-5884

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0u55, 6u65, and 7u45 Java SE Embedded version 7u45 OpenJDK version 7

Description The issue affects confidentiality and is related to vectors connected to CORBA. It is noted that Oracle has not commented on claims that the problem is related to an incorrect check for code permissions by CORBA stub factories.

Recommendations For Oracle Java SE versions 5.0u55, 6u65, and 7u45, update to a version that is not affected by this issue. For Java SE Embedded version 7u45, update to a version that is not affected by this issue. For OpenJDK version 7, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to CORBA-related functionality until a patch is available.