Lucene search

K
kasperskyKaspersky LabKLA10000
HistoryJun 18, 2013 - 12:00 a.m.

KLA10000 Unspecified vulnerability in Oracle Java Runtime Environment

2013-06-1800:00:00
Kaspersky Lab
threats.kaspersky.com
29

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

Low

EPSS

0.008

Percentile

82.2%

An unspecified vulnerability was found in the JRE component of Oracle Java SE in versions up to 7.21. By exploiting this vulnerability malicious users can affect integrity. This vulnerability can be exploited remotely at a point related to Deployment.

Original advisories

confirmation

mitre

Related products

Oracle-Java-JRE-1.7.x

Oracle-Java-JRE-1.8.x

Oracle-Java-JRE-1.4.x

CVE list

CVE-2013-3744 critical

Solution

Update to latest version

Java SE

Impacts

  • LoI

Loss of integrity. Exploitation of vulnerabilities with this impact can lead to partial system fault or system components connection disruption.

Affected Products

  • Oracleย Java Runtime Environmentย 7.21 and earlier

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

Low

EPSS

0.008

Percentile

82.2%