Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Input validation

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...

CVE-2013-2394

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2013-2432

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Critical: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2013-2420

CVE-2013-2420 is an integer overflow in sun.awt.image.ImageRepresentation.setPixels in Oracle Java SE 7/6 (and OpenJDK 6/7) related to image/raster dimension validation in the 2D component. A remote attacker could exploit this via a crafted image/page to achieve arbitrary code execution, affectin...

CVE-2013-1569

CVE-2013-1569 is a glyph table issue in the ICU library (Unicode components). Connected sources confirm ICU-related fixes across Debian and Gentoo advisories, with CVE-2013-1569 listed alongside other ICU CVEs. Debian DSA-3187-1/DSA-3187-1:B06DD note the issue across icu across multiple releases;...

CVE-2013-2394

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2013-2383

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...

CVE-2013-2384

CVE-2013-2384 is a font layout issue in the International Components for Unicode (ICU) library. Connected advisories indicate the problem affected ICU components as shipped in Linux distributions (e.g., icu in Debian stable/wheezy and in newer Debian releases). The Debian security entries list CV...

CVE-2013-2434

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

CVE-2013-2434

CVE-2013-2434 is an unspecified vulnerability in the JRE component of Oracle Java SE 7 (Update 17 and earlier) and JavaFX 2.2.7 and earlier. It is described as affecting confidentiality, integrity, and availability via unknown vectors related to 2D. The CVE is listed with high impact (CVSS 2.0/10...

CVE-2013-2383

CVE-2013-2383 is a glyph-table vulnerability in the ICU library (ICU component). Debian advisories (DSA-3187-1 / DLA-219-1) enumerate CVE-2013-2383 among related ICU issues and note fixes: for the Debian Wheezy (stable) release, ICU was fixed in version 4.8.1.1-12+deb7u2, and future (Jessie/sid) ...

CVE-2013-1569

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...

CVE-2013-1569

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...

CVE-2013-2384

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...

CVE-2013-2419

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous...

CVE-2013-2419

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous...

CVE-2013-2432

CVE-2013-2432 affects the Java Runtime Environment used in IBM WebSphere products when IBM JRE is bundled with WebSphere Application Server. IBM notes this vulnerability (in the Oracle Java CPU April 2013 family) as a high-severity issue with CVSS 10, affecting 2D vectors. The recommended remedia...