CVE-2013-5896

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0u55, 6u65, and 7u45 Java SE Embedded version 7u45 OpenJDK version 7u45

Description The issue affects availability and is related to vectors in the CORBA component, allowing remote attackers to exploit it. It is noted that the com.sun.corba.se package and its sub-packages may not be included on the restricted package list, although Oracle has not commented on this claim.

Recommendations For Oracle Java SE versions 5.0u55, 6u65, and 7u45, update to a version that is not affected by this issue. For Java SE Embedded version 7u45, update to a version that is not affected by this issue. For OpenJDK version 7u45, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the CORBA component until a patch is available.