PT-2017-5487
CVE-2013-4578
·
Published
2014-01-15
·
Updated
2018-01-17
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
OpenJDK and Oracle Java SE versions prior to 7u51
Description:
The issue allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.
Recommendations:
For versions prior to 7u51, update to version 7u51 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾