10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.7%
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the “Very High” security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka “Issue 53” and the “Java Security Slider” vulnerability.
blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
marc.info/?l=bugtraq&m=136439120408139&w=2
marc.info/?l=bugtraq&m=136733161405818&w=2
rhn.redhat.com/errata/RHSA-2013-0237.html
seclists.org/fulldisclosure/2013/Jan/241
thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/
www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150
www.kb.cert.org/vuls/id/858729
www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
www.scmagazine.com.au/News/330453%2Cjava-still-unsafe-new-flaws-discovered.aspx
www.us-cert.gov/cas/techalerts/TA13-032A.html
www.zdnet.com/java-update-doesnt-prevent-silent-exploits-at-all-7000010422/
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15906
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19171