Lucene search

K
cve[email protected]CVE-2013-0434
HistoryFeb 02, 2013 - 12:55 a.m.

CVE-2013-0434

2013-02-0200:55:01
web.nvd.nist.gov
79
cve-2013-0434
java
jre
oracle
vulnerability
confidentiality
remote attack
jaxp
openjdk

7.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

80.6%

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAXP. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the public declaration of the loadPropertyFile method in the JAXP FuncSystemProperty class, which allows remote attackers to obtain sensitive information.

Affected configurations

NVD
Node
oraclejreMatch1.7.0
OR
oraclejreMatch1.7.0update1
OR
oraclejreMatch1.7.0update10
OR
oraclejreMatch1.7.0update11
OR
oraclejreMatch1.7.0update2
OR
oraclejreMatch1.7.0update3
OR
oraclejreMatch1.7.0update4
OR
oraclejreMatch1.7.0update5
OR
oraclejreMatch1.7.0update6
OR
oraclejreMatch1.7.0update7
OR
oraclejreMatch1.7.0update9
Node
oraclejdkMatch1.7.0
OR
oraclejdkMatch1.7.0update1
OR
oraclejdkMatch1.7.0update10
OR
oraclejdkMatch1.7.0update11
OR
oraclejdkMatch1.7.0update2
OR
oraclejdkMatch1.7.0update3
OR
oraclejdkMatch1.7.0update4
OR
oraclejdkMatch1.7.0update5
OR
oraclejdkMatch1.7.0update6
OR
oraclejdkMatch1.7.0update7
OR
oraclejdkMatch1.7.0update9
Node
oraclejreMatch1.6.0update22
OR
oraclejreMatch1.6.0update23
OR
oraclejreMatch1.6.0update24
OR
oraclejreMatch1.6.0update25
OR
oraclejreMatch1.6.0update26
OR
oraclejreMatch1.6.0update27
OR
oraclejreMatch1.6.0update29
OR
oraclejreMatch1.6.0update30
OR
oraclejreMatch1.6.0update31
OR
oraclejreMatch1.6.0update32
OR
oraclejreMatch1.6.0update33
OR
oraclejreMatch1.6.0update34
OR
oraclejreMatch1.6.0update35
OR
oraclejreMatch1.6.0update37
OR
oraclejreMatch1.6.0update38
OR
sunjreMatch1.6.0
OR
sunjreMatch1.6.0update_1
OR
sunjreMatch1.6.0update_10
OR
sunjreMatch1.6.0update_11
OR
sunjreMatch1.6.0update_12
OR
sunjreMatch1.6.0update_13
OR
sunjreMatch1.6.0update_14
OR
sunjreMatch1.6.0update_15
OR
sunjreMatch1.6.0update_16
OR
sunjreMatch1.6.0update_17
OR
sunjreMatch1.6.0update_18
OR
sunjreMatch1.6.0update_19
OR
sunjreMatch1.6.0update_2
OR
sunjreMatch1.6.0update_20
OR
sunjreMatch1.6.0update_21
OR
sunjreMatch1.6.0update_3
OR
sunjreMatch1.6.0update_4
OR
sunjreMatch1.6.0update_5
OR
sunjreMatch1.6.0update_6
OR
sunjreMatch1.6.0update_7
OR
sunjreMatch1.6.0update_9
Node
oraclejdkMatch1.6.0update22
OR
oraclejdkMatch1.6.0update23
OR
oraclejdkMatch1.6.0update24
OR
oraclejdkMatch1.6.0update25
OR
oraclejdkMatch1.6.0update26
OR
oraclejdkMatch1.6.0update27
OR
oraclejdkMatch1.6.0update29
OR
oraclejdkMatch1.6.0update30
OR
oraclejdkMatch1.6.0update31
OR
oraclejdkMatch1.6.0update32
OR
oraclejdkMatch1.6.0update33
OR
oraclejdkMatch1.6.0update34
OR
oraclejdkMatch1.6.0update35
OR
oraclejdkMatch1.6.0update37
OR
oraclejdkMatch1.6.0update38
OR
sunjdkMatch1.6.0
OR
sunjdkMatch1.6.0update_10
OR
sunjdkMatch1.6.0update_11
OR
sunjdkMatch1.6.0update_12
OR
sunjdkMatch1.6.0update_13
OR
sunjdkMatch1.6.0update_14
OR
sunjdkMatch1.6.0update_15
OR
sunjdkMatch1.6.0update_16
OR
sunjdkMatch1.6.0update_17
OR
sunjdkMatch1.6.0update_18
OR
sunjdkMatch1.6.0update_19
OR
sunjdkMatch1.6.0update_20
OR
sunjdkMatch1.6.0update_21
OR
sunjdkMatch1.6.0update_3
OR
sunjdkMatch1.6.0update_4
OR
sunjdkMatch1.6.0update_5
OR
sunjdkMatch1.6.0update_6
OR
sunjdkMatch1.6.0update_7
OR
sunjdkMatch1.6.0update1
OR
sunjdkMatch1.6.0update1_b06
OR
sunjdkMatch1.6.0update2
Node
oraclejreMatch1.5.0update36
OR
oraclejreMatch1.5.0update38
OR
sunjreMatch1.5.0
OR
sunjreMatch1.5.0update1
OR
sunjreMatch1.5.0update10
OR
sunjreMatch1.5.0update11
OR
sunjreMatch1.5.0update12
OR
sunjreMatch1.5.0update13
OR
sunjreMatch1.5.0update14
OR
sunjreMatch1.5.0update15
OR
sunjreMatch1.5.0update16
OR
sunjreMatch1.5.0update17
OR
sunjreMatch1.5.0update18
OR
sunjreMatch1.5.0update19
OR
sunjreMatch1.5.0update2
OR
sunjreMatch1.5.0update20
OR
sunjreMatch1.5.0update21
OR
sunjreMatch1.5.0update22
OR
sunjreMatch1.5.0update23
OR
sunjreMatch1.5.0update24
OR
sunjreMatch1.5.0update25
OR
sunjreMatch1.5.0update26
OR
sunjreMatch1.5.0update27
OR
sunjreMatch1.5.0update28
OR
sunjreMatch1.5.0update29
OR
sunjreMatch1.5.0update3
OR
sunjreMatch1.5.0update31
OR
sunjreMatch1.5.0update33
OR
sunjreMatch1.5.0update4
OR
sunjreMatch1.5.0update5
OR
sunjreMatch1.5.0update6
OR
sunjreMatch1.5.0update7
OR
sunjreMatch1.5.0update8
OR
sunjreMatch1.5.0update9
Node
oraclejdkMatch1.5.0update36
OR
oraclejdkMatch1.5.0update38
OR
sunjdkMatch1.5.0
OR
sunjdkMatch1.5.0update1
OR
sunjdkMatch1.5.0update10
OR
sunjdkMatch1.5.0update11
OR
sunjdkMatch1.5.0update11_b03
OR
sunjdkMatch1.5.0update12
OR
sunjdkMatch1.5.0update13
OR
sunjdkMatch1.5.0update14
OR
sunjdkMatch1.5.0update15
OR
sunjdkMatch1.5.0update16
OR
sunjdkMatch1.5.0update17
OR
sunjdkMatch1.5.0update18
OR
sunjdkMatch1.5.0update19
OR
sunjdkMatch1.5.0update2
OR
sunjdkMatch1.5.0update20
OR
sunjdkMatch1.5.0update21
OR
sunjdkMatch1.5.0update22
OR
sunjdkMatch1.5.0update23
OR
sunjdkMatch1.5.0update24
OR
sunjdkMatch1.5.0update25
OR
sunjdkMatch1.5.0update26
OR
sunjdkMatch1.5.0update27
OR
sunjdkMatch1.5.0update28
OR
sunjdkMatch1.5.0update29
OR
sunjdkMatch1.5.0update3
OR
sunjdkMatch1.5.0update31
OR
sunjdkMatch1.5.0update33
OR
sunjdkMatch1.5.0update4
OR
sunjdkMatch1.5.0update5
OR
sunjdkMatch1.5.0update6
OR
sunjdkMatch1.5.0update7
OR
sunjdkMatch1.5.0update7_b03
OR
sunjdkMatch1.5.0update8
OR
sunjdkMatch1.5.0update9
Node
oraclejreRange1.4.2_40
OR
oraclejreMatch1.4.2_38
OR
sunjreMatch1.4.2
OR
sunjreMatch1.4.2_1
OR
sunjreMatch1.4.2_2
OR
sunjreMatch1.4.2_3
OR
sunjreMatch1.4.2_4
OR
sunjreMatch1.4.2_5
OR
sunjreMatch1.4.2_6
OR
sunjreMatch1.4.2_7
OR
sunjreMatch1.4.2_8
OR
sunjreMatch1.4.2_9
OR
sunjreMatch1.4.2_10
OR
sunjreMatch1.4.2_11
OR
sunjreMatch1.4.2_12
OR
sunjreMatch1.4.2_13
OR
sunjreMatch1.4.2_14
OR
sunjreMatch1.4.2_15
OR
sunjreMatch1.4.2_16
OR
sunjreMatch1.4.2_17
OR
sunjreMatch1.4.2_18
OR
sunjreMatch1.4.2_19
OR
sunjreMatch1.4.2_20
OR
sunjreMatch1.4.2_21
OR
sunjreMatch1.4.2_22
OR
sunjreMatch1.4.2_23
OR
sunjreMatch1.4.2_24
OR
sunjreMatch1.4.2_25
OR
sunjreMatch1.4.2_26
OR
sunjreMatch1.4.2_27
OR
sunjreMatch1.4.2_28
OR
sunjreMatch1.4.2_29
OR
sunjreMatch1.4.2_30
OR
sunjreMatch1.4.2_31
OR
sunjreMatch1.4.2_32
OR
sunjreMatch1.4.2_33
OR
sunjreMatch1.4.2_34
OR
sunjreMatch1.4.2_35
OR
sunjreMatch1.4.2_36
OR
sunjreMatch1.4.2_37
Node
oraclejdkRange1.4.2_40
OR
oraclejdkMatch1.4.2_38
OR
sunjdkMatch1.4.2
OR
sunjdkMatch1.4.2_1
OR
sunjdkMatch1.4.2_2
OR
sunjdkMatch1.4.2_3
OR
sunjdkMatch1.4.2_4
OR
sunjdkMatch1.4.2_5
OR
sunjdkMatch1.4.2_6
OR
sunjdkMatch1.4.2_7
OR
sunjdkMatch1.4.2_8
OR
sunjdkMatch1.4.2_9
OR
sunjdkMatch1.4.2_10
OR
sunjdkMatch1.4.2_11
OR
sunjdkMatch1.4.2_12
OR
sunjdkMatch1.4.2_13
OR
sunjdkMatch1.4.2_14
OR
sunjdkMatch1.4.2_15
OR
sunjdkMatch1.4.2_16
OR
sunjdkMatch1.4.2_17
OR
sunjdkMatch1.4.2_18
OR
sunjdkMatch1.4.2_19
OR
sunjdkMatch1.4.2_22
OR
sunjdkMatch1.4.2_23
OR
sunjdkMatch1.4.2_25
OR
sunjdkMatch1.4.2_26
OR
sunjdkMatch1.4.2_27
OR
sunjdkMatch1.4.2_28
OR
sunjdkMatch1.4.2_29
OR
sunjdkMatch1.4.2_30
OR
sunjdkMatch1.4.2_31
OR
sunjdkMatch1.4.2_32
OR
sunjdkMatch1.4.2_33
OR
sunjdkMatch1.4.2_34
OR
sunjdkMatch1.4.2_35
OR
sunjdkMatch1.4.2_36
OR
sunjdkMatch1.4.2_37
CPENameOperatorVersion
oracle:jreoracle jreeq1.7.0

References

7.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

80.6%