[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-1500Date: (C)2013-06-18   (M)2023-12-22


Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 3.6
Exploit Score: 3.9
Impact Score: 4.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: NONE
  
Reference:
SECUNIA-54154
BID-60627
GLSA-201406-32
HPSBUX02908
MDVSA-2013:183
RHSA-2013:0963
RHSA-2013:1059
RHSA-2013:1060
RHSA-2013:1081
RHSA-2013:1455
RHSA-2013:1456
RHSA-2014:0414
SSRT101305
SUSE-SU-2013:1255
SUSE-SU-2013:1257
SUSE-SU-2013:1263
SUSE-SU-2013:1264
SUSE-SU-2013:1293
SUSE-SU-2013:1305
TA13-169A
http://advisories.mageia.org/MGASA-2013-0185.html
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975148
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/1111f9acb96b
http://www-01.ibm.com/support/docview.wss?uid=swg21642336
http://www-01.ibm.com/support/docview.wss?uid=swg21644197
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
https://twitter.com/timb_machine/status/347110990124568577
oval:org.mitre.oval:def:17221
oval:org.mitre.oval:def:19663
oval:org.mitre.oval:def:19726

CPE    136
cpe:/a:sun:jre:1.5.0:update19
cpe:/a:sun:jre:1.5.0:update18
cpe:/a:sun:jre:1.5.0:update17
cpe:/a:sun:jre:1.5.0:update23
...
OVAL    25
oval:org.secpod.oval:def:501095
oval:org.secpod.oval:def:1500225
oval:org.secpod.oval:def:1600297
oval:org.secpod.oval:def:1500229
...

© SecPod Technologies