JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than...

OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the...

CVE-2013-2424

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous...

DEBIAN-CVE-2013-2384

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...

CVE-2013-2415

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented o...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented o...

CVE-2013-2434

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX...

Immunity Canvas: JAVA_DYNAMICBINDING

Name| javaDynamicBinding ---|--- CVE| CVE-2013-2423 Exploit Pack| CANVAS Description| javaDynamicBinding Notes| CVE Name: CVE-2013-2423 VENDOR: Sun Notes: A vulnerability in MethodHandle allows to overwrite public final fields. This can be abused in order to disable Java Sandbox. The current...

OpenJDK: Wrapper.convert insufficient type checks (Libraries, 8009049)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 a...

OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI...

OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the...

CVE-2013-2439

CVE-2013-2439 affects IBM WebSphere ILOG JRules (v7.1 with IBM JRE) and IBM Operational Decision Manager (v7.5, v8.0, v8.5) shipped with IBM JRE. Root cause not explicitly detailed in the sources, but remediation is available as interim fixes: for JRules V7.1 use 7.1.1.5-WS-BRMS_JDK-WIN-IF024; OD...

CVE-2013-2414

Technical details for CVE-2013-2414 are not publicly available in the provided documents. Monitor for updates in trusted sources to obtain affected products, impact, and remediation.

CVE-2013-2429

CVE-2013-2429 is an unspecified vulnerability in the Java Runtime Environment’s ImageIO component, affecting Oracle Java SE 7u17 and earlier, Java SE 6u43 and earlier, Java SE 5.0u41 and earlier, and OpenJDK 6/7. It allows remote attackers to compromise confidentiality, integrity, and availabilit...

CVE-2013-2430

CVE-2013-2430 is a Java Runtime Environment (JRE) vulnerability affecting confidentiality, integrity, and availability via unknown vectors related to ImageIO in Oracle Java SE 7u17 and earlier, 6u43 and earlier, 5.0u41 and earlier, JavaFX 2.2.7 and earlier, and OpenJDK 6/7. Connected advisories c...

CVE-2013-2436

Technical details for CVE-2013-2436 are not publicly provided in the connected documents. The initial entry contains general vulnerability information but no affected product/version specifics or root-cause. Monitor for updates from authoritative sources for any concrete details.

CVE-2013-1569

CVE-2013-1569 is a glyph table issue in the ICU library (Unicode components). Connected sources confirm ICU-related fixes across Debian and Gentoo advisories, with CVE-2013-1569 listed alongside other ICU CVEs. Debian DSA-3187-1/DSA-3187-1:B06DD note the issue across icu across multiple releases;...

CVE-2013-2424

CVE-2013-2424 is shown in MiracleLinux advisory AXSA-2013-427/AXSA-2013-428 as an unspecified vulnerability in the Java Runtime Environment (JRE) component that affects OpenJDK/JRE within MiracleLinux OpenJDK deployments. The issue is described as enabling remote attackers to affect confidentiali...

CVE-2013-2420

CVE-2013-2420 is an integer overflow in sun.awt.image.ImageRepresentation.setPixels in Oracle Java SE 7/6 (and OpenJDK 6/7) related to image/raster dimension validation in the 2D component. A remote attacker could exploit this via a crafted image/page to achieve arbitrary code execution, affectin...