Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1491
HistoryMar 08, 2013 - 6:55 p.m.

CVE-2013-1491

2013-03-0818:55:00
CWE-94
[email protected]
web.nvd.nist.gov
127
java
runtime environment
jre
oracle
cve
security
remote code execution
java se
vulnerability

6.7 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.817 High

EPSS

Percentile

98.3%

JSON

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.

References

Related

veracode 1
ubuntucve 3
prion 3
checkpoint_advisories 1
zdi 1
cve 2
nessus 23
suse 6
openvas 7
redhat 7
securityvulns 2
ibm 15
gentoo 1
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:54:50
ubuntucve
ubuntucve
CVE-2013-1491
2013-03-08 00:00:00
CVE-2013-2394
2013-04-17 00:00:00
CVE-2013-2432
2013-04-17 00:00:00
prion
prion
Design/Logic Flaw
2013-03-08 18:55:00
Design/Logic Flaw
2013-04-17 18:55:00
Design/Logic Flaw
2013-04-17 18:55:00
checkpoint_advisories
checkpoint_advisories
Oracle Java Font Processing Memory Corruption (CVE-2013-1491)
2013-06-30 00:00:00
zdi
zdi
(Pwn2Own) Oracle Java Font Handling Remote Code Execution Vulnerability
2013-05-10 00:00:00
cve
cve
CVE-2013-2394
2013-04-17 18:55:00
CVE-2013-2432
2013-04-17 18:55:00
nessus
nessus
SuSE 11.2 Security Update : Java 1.4.2 (SAT Patch Number 7793)
2013-06-11 00:00:00
SuSE 10 Security Update : Java 1.4.2 (ZYPP Patch Number 8601)
2013-06-11 00:00:00
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2013:0855)
2013-05-23 00:00:00
suse
suse
Security update for Java 1.4.2 (important)
2013-06-10 18:09:23
Security update for IBM Java (important)
2013-07-03 15:04:18
Security update for IBM Java (important)
2013-07-02 19:04:22
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:0934-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0835-3)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0835-2)
2021-06-09 00:00:00
redhat
redhat
(RHSA-2013:0855) Important: java-1.5.0-ibm security update
2013-05-22 00:00:00
(RHSA-2013:0823) Critical: java-1.6.0-ibm security update
2013-05-14 00:00:00
(RHSA-2013:0758) Critical: java-1.6.0-sun security update
2013-04-18 00:00:00
securityvulns
securityvulns
APPLE-SA-2013-04-16-2 Java for OS X 2013-003 and Mac OS X v10.6 Update 15
2013-04-22 00:00:00
Oracle Java / OpenJDK multiple security vulnerabilities
2013-04-22 00:00:00
ibm
ibm
IBM WebSphere Cast Iron Security Bulletin: Multiple security vulnerabilities in IBM JRE 6
2018-06-15 06:56:55
Security Bulletin: IBM WebSphere Lombardi Edition – Information regarding security vulnerability in IBM SDK for Java that shipped with IBM WebSphere Application Server and addressed by Oracle CPU April 2013 (CVE-2013-0169)
2022-09-25 21:06:56
Security Bulletin: WebSphere Application Server Community Edition 3.0.0.3 Oracle CPU April 2013
2022-09-25 21:06:56
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

6.7 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.817 High

EPSS

Percentile

98.3%

JSON
Related for CVE-2013-1491
veracode1ubuntucve3prion3checkpoint_advisories1zdi1cve2nessus23suse6openvas7redhat7securityvulns2ibm15gentoo1