CVE-2013-5910

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u65 and 7u45 Java SE Embedded version 7u45 OpenJDK version 7u45

Description The issue affects the integrity of data and is related to the Security component. It allows remote attackers to exploit the vulnerability via unknown vectors. There are claims that the CanonicalizerBase.java in the XML canonicalizer is involved, potentially allowing untrusted code to access mutable byte arrays. However, Oracle has not commented on these claims.

Recommendations For Oracle Java SE versions 6u65 and 7u45, update to a version that is not affected by this issue. For Java SE Embedded version 7u45, update to a version that is not affected by this issue. For OpenJDK version 7u45, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the Security component until a patch is available.