CVE-2013-2458

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) versions 7 Update 21 and earlier OpenJDK 7

Description The issue affects confidentiality and integrity via unknown vectors related to Libraries. It is reported that this issue may allow remote attackers to bypass the Java sandbox, potentially related to an error involving method handles.

Recommendations For Java Runtime Environment (JRE) versions 7 Update 21 and earlier, update to a version later than 7 Update 21. For OpenJDK 7, consider disabling the use of method handles until a patch is available. As a temporary workaround, restrict access to libraries to minimize the risk of exploitation.