CVE-2013-1488

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 17 and earlier OpenJDK versions 6 and 7

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, and the JDBC driver manager. This was demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.

Recommendations For Oracle Java SE versions 7 Update 17 and earlier, update to a version later than 7 Update 17 to resolve the issue. For OpenJDK versions 6 and 7, consider disabling the JDBC driver manager as a temporary workaround until a patch is available.