CVE-2013-2473

CVE-2013-2473 is described as an unspecified vulnerability in the Java Runtime Environment (JRE) affecting Oracle Java SE 7u21 and earlier, 6u45 and earlier, 5.0u45 and earlier, and OpenJDK 7, with an attack vector related to the 2D component and potential Java sandbox bypass. IBM documentation l...

CVE-2013-2468

Technical details about CVE-2013-2468 are not publicly provided in the supplied documents; no specific affected products, versions, impact, or remediation are present. Monitor for updates.

CVE-2013-2466

CVE-2013-2466 concerns Oracle Java SE JRE, affecting Java Runtime Environment (JRE) 7 Update 21 and earlier and 6 Update 45 and earlier. The vulnerability is described as unspecified and resides in the Deployment component, enabling remote attackers to affect confidentiality, integrity, and avail...

CVE-2013-2465

CVE-2013-2465 is a Java 2D component vulnerability that can cause memory corruption and potential sandbox bypass/remote code execution. It affected Oracle Java SE up to JRE 7u21, JDK 6 up to 6u45, and OpenJDK 7, with 2D-related vectors noted in public disclosures. Several advisories (Debian DSA-2...

CVE-2013-2457

MiracleLinux AXSA:2013-553:03 advisory lists CVE-2013-2457 as an in-JRE vulnerability in the JMX area affecting OpenJDK 7 and Oracle Java SE 7-era JREs. The description indicates an unspecified vulnerability in the Java Runtime Environment component that allows remote attackers to affect integrit...

CVE-2013-2448

CVE-2013-2448 is documented in MiracleLinux AXSA-2013-553:03 as an unspecified vulnerability in the JRE Sound component of OpenJDK/OpenJDK-derived runtimes shipped with MiracleLinux 3. The advisory indicates a remote-confidentiality/integrity/availability impact via sound-related vectors and note...

CVE-2013-2462

CVE-2013-2462 is an unspecified vulnerability in the Java Runtime Environment (JRE) Deployment component that Oracle linked to Java SE 7 Update 21 and earlier. The connected IBM documentation shows affected products as IBM CICS Transaction Gateway for Multiplatforms (versions 9.0 and earlier), wh...

CVE-2013-2464

CVE-2013-2464 is described as an unspecified vulnerability in the Oracle Java SE JRE with potential impact to confidentiality, integrity, and availability via unknown vectors related to 2D. Connected documents provide concrete details for related CVEs (2463, 2465, 2470, 2471, 2472, 2473) indicati...

CVE-2013-3744

CVE-2013-3744 is a vulnerability in the Java Runtime Environment (JRE) Deployment component affecting Oracle Java SE 7 Update 21 and earlier. The provided documents treat it as an unspecified vulnerability with remote exploitation via unknown vectors and do not detail an exploit. CVSS base 2.0 is...

CVE-2013-3743

Technical details about CVE-2013-3743 are not publicly available in the provided documents; please monitor for updates.

CVE-2013-2400

CVE-2013-2400 is an unspecified vulnerability in the JRE component of Oracle Java SE 7 Update 21 and earlier that can affect integrity via unknown vectors in Deployment. Public details in the initial report are limited to the vulnerability’s existence and affected product version; connected IBM/E...

CVE-2013-2445

CVE-2013-2445 is an unspecified vulnerability in the Java Runtime Environment (JRE)/Hotspot affecting availability via unknown vectors, with a note that it may bypass the Java sandbox through memory allocation error handling. Publicly listed affected products include Oracle Java SE 7 Update 21 an...

KLA10000 Unspecified vulnerability in Oracle Java Runtime Environment

An unspecified vulnerability was found in the JRE component of Oracle Java SE in versions up to 7.21. By exploiting this vulnerability malicious users can affect integrity. This vulnerability can be exploited remotely at a point related to Deployment. Original advisories confirmation mitre Relate...

Oracle Java SE Critical Patch Update Announcement - June 2013

Oracle has released a June 2013 Critical Patch Update for Oracle Java SE. This Critical Patch Update is a collection of patches for multiple security vulnerabilities in Oracle Java SE. The update contains 40 new security vulnerability fixes, including a patch for Oracle JavaDoc frame injection...

CVE-2013-2461

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlier and R28.2.7 and earlier; and OpenJDK 7 allows remote attackers to affect...

Oracle to Patch 40 Java Bugs

There is a massive stack of Java patches on deck for tomorrow, with Oracle planning to fix 40 vulnerabilities in a number of different components of Java SE. Nearly all of the vulnerabilities are remotely exploitable. Oracle doesn’t release much in the way of information about the content of its...

VMware vCenter Update Manager Multiple Vulnerabilities (VMSA-2012-0013)

The version of VMware vCenter Update Manager installed on the remote Windows host is 4.0 earlier than Update 4a, or 4.1 earlier than Update 3. Such versions use a version of the Oracle JRE 1.5 that is affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Java Web Start Double Quote Injection Remote Code Execution

Exploit for multiple platform in category remote exploits require 'msf/core' class Metasploit3 'Sun Java Web Start Double Quote Injection', 'Description' = %q This module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. Parameters intial-heap-size and max-heap-size ...

Sun Java Web Start Double Quote Injection Vulnerability

This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. Parameters intial-heap-size and max-heap-size in a JNLP file can contain a double quote which is not properly sanitized when creating the command line for javaw.exe. This allows the injection of...

Java Runtime Environment DriverManager doPrivileged block sandbox bypass

Added: 05/24/2013 CVE: CVE-2013-1488 BID: 58504 OSVDB: 91472 Background Oracle Java is a development platform for developing and deploying Java applications. It includes the Java Development Kit JDK and the Java Runtime Environment JRE. The JRE provides the minimum requirements for executing a Ja...