CVE-2013-2426

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 17 and earlier OpenJDK versions 6 and 7

Description The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. It is reportedly related to the incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox.

Recommendations For Java SE versions 7 Update 17 and earlier, update to a version later than Update 17 to resolve the issue. For OpenJDK versions 6 and 7, consider disabling the use of the ConcurrentHashMap class until a patch is available. As a temporary workaround, restrict access to the java.util.concurrent package to minimize the risk of exploitation.