Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2013-4578
HistoryDec 29, 2017 - 10:29 p.m.

CVE-2013-4578

2017-12-2922:29:00
CWE-74
redhat
web.nvd.nist.gov
27
cve
jarsigner
openjdk
oracle java se
code-signing
vulnerability
bytecode injection
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.

Affected configurations

Nvd
Node
oraclejdkMatch1.7.0update1
OR
oraclejdkMatch1.7.0update10
OR
oraclejdkMatch1.7.0update10_b31
OR
oraclejdkMatch1.7.0update11
OR
oraclejdkMatch1.7.0update11_b32
OR
oraclejdkMatch1.7.0update13
OR
oraclejdkMatch1.7.0update15
OR
oraclejdkMatch1.7.0update17
OR
oraclejdkMatch1.7.0update17_b31
OR
oraclejdkMatch1.7.0update17_b32
OR
oraclejdkMatch1.7.0update2
OR
oraclejdkMatch1.7.0update21
OR
oraclejdkMatch1.7.0update21_b31
OR
oraclejdkMatch1.7.0update25
OR
oraclejdkMatch1.7.0update25_b33
OR
oraclejdkMatch1.7.0update25_b34
OR
oraclejdkMatch1.7.0update25_b35
OR
oraclejdkMatch1.7.0update3
OR
oraclejdkMatch1.7.0update4
OR
oraclejdkMatch1.7.0update40
OR
oraclejdkMatch1.7.0update45
OR
oraclejdkMatch1.7.0update45_b31
OR
oraclejdkMatch1.7.0update45_b32
OR
oraclejdkMatch1.7.0update45_b33
OR
oraclejdkMatch1.7.0update45_b34
OR
oraclejdkMatch1.7.0update5
OR
oraclejdkMatch1.7.0update51
OR
oraclejdkMatch1.7.0update6
OR
oraclejdkMatch1.7.0update7
OR
oraclejdkMatch1.7.0update7_b32
OR
oraclejdkMatch1.7.0update9
OR
oraclejdkMatch1.7.0update9_b31
OR
oraclejdkMatch1.7.0update9_b32
OR
oraclejreMatch1.7.0update1
OR
oraclejreMatch1.7.0update10
OR
oraclejreMatch1.7.0update10_b31
OR
oraclejreMatch1.7.0update11
OR
oraclejreMatch1.7.0update11_b32
OR
oraclejreMatch1.7.0update13
OR
oraclejreMatch1.7.0update15
OR
oraclejreMatch1.7.0update17
OR
oraclejreMatch1.7.0update17_b31
OR
oraclejreMatch1.7.0update17_b32
OR
oraclejreMatch1.7.0update2
OR
oraclejreMatch1.7.0update21
OR
oraclejreMatch1.7.0update21_b31
OR
oraclejreMatch1.7.0update25
OR
oraclejreMatch1.7.0update25_b33
OR
oraclejreMatch1.7.0update25_b34
OR
oraclejreMatch1.7.0update25_b35
OR
oraclejreMatch1.7.0update3
OR
oraclejreMatch1.7.0update4
OR
oraclejreMatch1.7.0update40
OR
oraclejreMatch1.7.0update45
OR
oraclejreMatch1.7.0update45_b31
OR
oraclejreMatch1.7.0update45_b32
OR
oraclejreMatch1.7.0update45_b33
OR
oraclejreMatch1.7.0update45_b34
OR
oraclejreMatch1.7.0update5
OR
oraclejreMatch1.7.0update51
OR
oraclejreMatch1.7.0update6
OR
oraclejreMatch1.7.0update7
OR
oraclejreMatch1.7.0update7_b32
OR
oraclejreMatch1.7.0update9
OR
oraclejreMatch1.7.0update9_b31
OR
oraclejreMatch1.7.0update9_b32
Node
oraclejdkRange≤1.7.0
OR
oraclejreRange≤1.7.0
VendorProductVersionCPE
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update10_b31:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update11_b32:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update13:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update15:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update17_b31:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update17_b32:*:*:*:*:*:*
Rows per page:
1-10 of 681

Related

openvas 2
ubuntucve 1
veracode 1
nvd 1
prion 1
cvelist 1
redhat 7
nessus 11
centos 2
openvas
openvas
Oracle Java SE 'jarsigner' Security Bypass Vulnerability - Windows
2018-05-23 00:00:00
Oracle Java SE 'jarsigner' Security Bypass Vulnerability - Linux
2018-05-23 00:00:00
ubuntucve
ubuntucve
CVE-2013-4578
2017-12-29 00:00:00
veracode
veracode
Code Injection
2019-01-15 08:55:05
nvd
nvd
CVE-2013-4578
2017-12-29 22:29:00
prion
prion
Design/Logic Flaw
2017-12-29 22:29:00
cvelist
cvelist
CVE-2013-4578
2017-12-29 22:00:00
redhat
redhat
(RHSA-2014:0136) Important: java-1.5.0-ibm security update
2014-02-04 00:00:00
(RHSA-2014:0097) Important: java-1.6.0-openjdk security update
2014-01-27 00:00:00
(RHSA-2014:0027) Important: java-1.7.0-openjdk security update
2014-01-15 00:00:00
nessus
nessus
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2014:0136)
2014-02-05 00:00:00
CentOS 5 / 6 : java-1.6.0-openjdk (CESA-2014:0097)
2014-01-28 00:00:00
Oracle Linux 5 / 6 : java-1.6.0-openjdk (ELSA-2014-0097)
2014-01-28 00:00:00
centos
centos
java security update
2014-01-27 22:53:27
java security update
2014-01-15 11:16:34

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON
Related for CVE-2013-4578
openvas2ubuntucve1veracode1nvd1prion1cvelist1redhat7nessus11centos2