CVE-2013-2419

CVE-2013-2419 relates to the ICU library and is labeled as a font processing issue. The connected Debian advisories show it among several ICU CVEs and indicate fixes in ICU package updates: for Debian Wheezy (stable) in icu 4.8.1.1-12+deb7u2, and for Jessie/sid in icu 52.1-7.1. The DLA-219-1 and ...

Java Runtime Environment Color Management memory overwrite

Added: 04/04/2013 CVE: CVE-2013-1493 BID: 58238 OSVDB: 90737 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...

Oracle Java Security Slider Feature Bypass (CVE-2013-1489)

A security feature bypass vulnerability has been reported in Oracle Java JRE. The vulnerability occurs when a serialized class is loaded via the applet tag object attribute. A remote attacker can exploit this vulnerability to bypass warning prompts by enticing user to open a Java applet embedded ...

Java Runtime Environment Color Management memory overwrite

Added: 04/04/2013 CVE: CVE-2013-1493 BID: 58238 OSVDB: 90737 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...

Java JRE Universally Enabled

Java JRE has not been universally disabled on the remote host via the Java control panel. Note that while Java can be individually disabled for each browser, universally disabling Java prevents it from running for all users and browsers. Functionality to disable Java universally in Windows may no...

Java JRE Enabled (Internet Explorer)

Java JRE is enabled in Internet Explorer. Internet Explorer is no longer supported by Microsoft. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65743; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/10/02"; scriptnameenglish:"Jav...

Java JRE Enabled (Opera)

Java JRE is enabled in Opera. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid65742; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/10/02"; scriptnameenglish:"Java JRE Enabled...

Java JRE Enabled (Mozilla Firefox)

Java JRE is enabled in Mozilla Firefox. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid65741; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/10/02"; scriptnameenglish:"Java J...

Java JRE Enabled (Google Chrome)

Java JRE is enabled in Google Chrome. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid65740; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/10/02"; scriptnameenglish:"Java JRE...

JDK: unspecified vulnerability fixed in 7u13 (2D)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

CVE-2013-0402

CVE-2013-0402 is a heap-based buffer overflow in the Oracle Java JRE/J2SE components that can enable remote code execution. Public‑facing vectors are not detailed in the provided records, but IBM and Red Hat advisories tie the issue to the IBM JRE shipped with IBM ODM/ILOG Domino (and IBM Domino ...

CVE-2013-1488

CVE-2013-1488 affects Oracle JRE/JDK (7u17 and earlier; OpenJDK 6/7) and is tied to the JDBC driver manager’s toString() handling and related reflection paths, enabling remote code execution via Java applets or drivers per the Pwn2Own demonstration. Exploitation evidence exists (PoCs and exploits...

CVE-2013-0401

CVE-2013-0401 is listed as fixed in MiracleLinux advisories AXSA-2013-427/AXSA-2013-428 for MiracleLinux 3.x/4.x OpenJDK (java-1.6.0-openjdk). The issue is a remote code execution via vectors related to AWT in OpenJDK/JRE. Remediation is to upgrade the OpenJDK runtime as described in the AXSA adv...

CVE-2013-1491

CVE-2013-1491 is referenced in IBM advisories as part of the IBM SDK for Java vulnerabilities shipped with WebSphere products; the IBM OSV entries indicate remediation via interim fixes or upgrading the IBM SDK for Java as described in those advisories. Public details about affected versions and ...

OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)

Unspecified vulnerability in the 2D component in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than...

Oracle Java JDK / JRE 5 < Update 41 Remote Code Execution (Windows)

The version of Oracle formerly Sun Java Runtime Environment JRE 5.x installed on the remote host is earlier than Update 41. It, therefore, potentially can allow remote code execution due to the following vulnerabilities related to the '2D' sub-component : - An integer overflow error exists relate...

Oracle Java JDK / JRE 6 < Update 43 Remote Code Execution (Windows)

The version of Oracle formerly Sun Java Runtime Environment JRE 6.x installed on the remote host is earlier than Update 43. It, therefore, potentially can allow remote code execution due to the following vulnerabilities related to the '2D' sub-component : - An integer overflow error exists relate...

Oracle Java JDK / JRE 7 < Update 17 Remote Code Execution (Windows)

The version of Oracle formerly Sun Java Runtime Environment JRE 7.x installed on the remote host is earlier than Update 17. It, therefore, potentially can allow remote code execution due to the following vulnerabilities related to the '2D' sub-component : - An integer overflow error exists relate...

Oracle Java JDK / JRE 7 < Update 17 Remote Code Execution (Unix)

The version of Oracle formerly Sun Java Runtime Environment JRE 7.x installed on the remote host is earlier than Update 17. It, therefore, potentially can allow remote code execution due to the following vulnerabilities related to the '2D' sub-component : - An integer overflow error exists relate...

Oracle Java JDK / JRE 6 < Update 43 Remote Code Execution (Unix)

The version of Oracle formerly Sun Java Runtime Environment JRE 6.x installed on the remote host is earlier than Update 43. It, therefore, potentially can allow remote code execution due to the following vulnerabilities related to the '2D' sub-component : - An integer overflow error exists relate...