Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveOracleCVE-2013-1491
HistoryMar 08, 2013 - 6:55 p.m.

CVE-2013-1491

2013-03-0818:55:01
CWE-94
oracle
web.nvd.nist.gov
136
java
runtime environment
jre
oracle
cve
security
remote code execution
java se
vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.823

Percentile

98.4%

JSON

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.

Affected configurations

Nvd
Node
oraclejdkMatch1.7.0update17
OR
oraclejreMatch1.7.0update17
VendorProductVersionCPE
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:*

References

Related

cvelist 3
prion 3
nvd 3
checkpoint_advisories 1
zdi 1
ubuntucve 3
veracode 1
cve 2
openvas 7
nessus 23
suse 6
redhat 7
securityvulns 2
ibm 15
gentoo 1
cvelist
cvelist
CVE-2013-1491
2013-03-08 18:00:00
CVE-2013-2432
2013-04-17 15:00:00
CVE-2013-2394
2013-04-17 15:00:00
prion
prion
Design/Logic Flaw
2013-03-08 18:55:00
Design/Logic Flaw
2013-04-17 18:55:00
Design/Logic Flaw
2013-04-17 18:55:00
nvd
nvd
CVE-2013-1491
2013-03-08 18:55:01
CVE-2013-2394
2013-04-17 18:55:06
CVE-2013-2432
2013-04-17 18:55:07
checkpoint_advisories
checkpoint_advisories
Oracle Java Font Processing Memory Corruption (CVE-2013-1491)
2013-06-30 00:00:00
zdi
zdi
(Pwn2Own) Oracle Java Font Handling Remote Code Execution Vulnerability
2013-05-10 00:00:00
ubuntucve
ubuntucve
CVE-2013-1491
2013-03-08 00:00:00
CVE-2013-2432
2013-04-17 00:00:00
CVE-2013-2394
2013-04-17 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:54:50
cve
cve
CVE-2013-2432
2013-04-17 18:55:07
CVE-2013-2394
2013-04-17 18:55:06
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:0934-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0871-2)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0835-1)
2021-06-09 00:00:00
nessus
nessus
SuSE 10 Security Update : Java 1.4.2 (ZYPP Patch Number 8601)
2013-06-11 00:00:00
SuSE 11.2 Security Update : Java 1.4.2 (SAT Patch Number 7793)
2013-06-11 00:00:00
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2013:0855)
2013-05-23 00:00:00
suse
suse
Security update for Java 1.4.2 (important)
2013-06-10 18:09:23
Security update for Java 1.5.0 (important)
2013-06-10 15:04:15
Security update for IBM Java (important)
2013-05-27 17:05:24
redhat
redhat
(RHSA-2013:0855) Important: java-1.5.0-ibm security update
2013-05-22 00:00:00
(RHSA-2013:0823) Critical: java-1.6.0-ibm security update
2013-05-14 00:00:00
(RHSA-2013:0758) Critical: java-1.6.0-sun security update
2013-04-18 00:00:00
securityvulns
securityvulns
APPLE-SA-2013-04-16-2 Java for OS X 2013-003 and Mac OS X v10.6 Update 15
2013-04-22 00:00:00
Oracle Java / OpenJDK multiple security vulnerabilities
2013-04-22 00:00:00
ibm
ibm
IBM WebSphere Cast Iron Security Bulletin: Multiple security vulnerabilities in IBM JRE 6
2018-06-15 06:56:55
Security Bulletin: IBM WebSphere Business Services Fabric – Information regarding a security vulnerability in IBM SDK for Java that shipped with IBM WebSphere Application Server and addressed by Oracle CPU April 2013 (CVE-2013-0169)
2022-09-25 21:06:56
Security Bulletin: WebSphere Application Server - IBM SDK for Java April 2013 CPU
2022-09-26 05:45:55
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.823

Percentile

98.4%

JSON
Related for CVE-2013-1491
cvelist3prion3nvd3checkpoint_advisories1zdi1ubuntucve3veracode1cve2openvas7nessus23suse6redhat7securityvulns2ibm15gentoo1