Java Runtime Environment Hotspot final field vulnerability

Added: 04/24/2013 CVE: CVE-2013-2423 BID: 59162 OSVDB: 92348 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...

USN-1806-1: OpenJDK 7 vulnerabilities

Ben Murphy discovered a vulnerability in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to execute arbitrary code. CVE-2013-0401 James Forshaw discovered a vulnerability in the OpenJDK JRE related to information disclosure, data integrity and...

CVE-2013-2423

creationtimestamp| type| source ---|---|--- 2013-04-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24976 2013-08-13 06:02:56+00:00| seen| MISP/5209cb81-3db0-4715-83e7-3de1950d2109 2013-08-22 12:36:06+00:00| seen| MISP/52160415-d274-42f8-85b4-665fac1d4fa4 2014-08-01...

Fedora Update for java-1.7.0-openjdk FEDORA-2013-5922

Check for the Version of java-1.7.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.7.0-openjdk FEDORA-2013-5922 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Java Applet Reflection Type Confusion Remote Code Execution

This module abuses Java Reflection to generate a Type Confusion, due to a weak access control when setting final fields on static classes, and run code outside of the Java Sandbox. The vulnerability affects Java version 7u17 and earlier. This exploit bypasses click-to-play throw a specially craft...

CentOS Update for java CESA-2013:0752 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for java-1.7.0-openjdk FEDORA-2013-5958

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for java-1.7.0-openjdk RHSA-2013:0752-01

Check for the Version of java-1.7.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.7.0-openjdk RHSA-2013:0752-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for java-1.7.0-openjdk FEDORA-2013-5958

Check for the Version of java-1.7.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.7.0-openjdk FEDORA-2013-5958 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for java CESA-2013:0752 centos5

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:0752 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for java-1.7.0-openjdk RHSA-2013:0751-01

Check for the Version of java-1.7.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.7.0-openjdk RHSA-2013:0751-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2013:0757)

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2013-2423

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented...

CVE-2013-2423

CVE-2013-2423 is an unspecified remote vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7 (Update 17 and earlier) and OpenJDK 7. The root cause, as per connected advisories, involves hotspot-related code and unknown vectors allowing reflection/type-confusion ...

CVE-2012-2423

The CVE-2012-2423 entry concerns Intuit QuickBooks 2009–2012 where the intu-help-qb (Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll, when used with Internet Explorer, respond differently to remote requests based on whether a ZIP pathname is valid. This beh...

Debian Security Advisory DSA 2423-1 (movabletype-opensource)

The remote host is missing an update to movabletype-opensource announced via advisory DSA 2423-1. OpenVAS Vulnerability Test $Id: deb24231.nasl 8970 2018-02-27 15:16:18Z cfischer $ Description: Auto-generated from advisory DSA 2423-1 movabletype-opensource Authors: Thomas Reinke Copyright:...

Debian DSA-2423-1 : movabletype-opensource - several vulnerabilities

Several vulnerabilities were discovered in Movable Type, a blogging system : Under certain circumstances, a user who has 'Create Entries' or'Manage Blog' permissions may be able to read known files on the local file system. The file management system contains shell command injection...

Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities - Aug 2011

This host is installed with Adobe Shockwave Player and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeshockwaveplayermultcodeexecvulnaug11.nasl 7006 2017-08-25 11:51:20Z teissa $ Adobe Shockwave Player Multiple Remote Code Execution...

CVE-2011-2423

CVE-2011-2423 affects Adobe Shockwave Player (Windows/macOS) where msvcr90.dll in versions prior to 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service via memory corruption. The connected documents corroborate multiple memory-corruption vulnerabilities in Sh...