CVE-2013-5842

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u40 and earlier Oracle Java SE versions 6u60 and earlier Oracle Java SE versions 5.0u51 and earlier Oracle Java SE Embedded versions 7u40 and earlier

Description The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. This is a different vulnerability than the one identified in CVE-2013-5850. It is also related to an Oracle Java ObjectOutputStream Sandbox Bypass Remote Code Execution issue.

Recommendations For Oracle Java SE versions 7u40 and earlier, update to a version later than 7u40. For Oracle Java SE versions 6u60 and earlier, update to a version later than 6u60. For Oracle Java SE versions 5.0u51 and earlier, update to a version later than 5.0u51. For Oracle Java SE Embedded versions 7u40 and earlier, update to a version later than 7u40. As a temporary workaround, consider restricting access to the ObjectOutputStream until a patch is available.