OpenJDK: Better handling of memory allocation errors (Hotspot, 7158805)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous...

Design/Logic Flaw

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

iOS Generates Weak Default Passwords for iPhone Tethering

Business travelers who tether their iPhones as mobile hotspots beware. Researchers at the University of Erlangen-Nuremberg in Germany have discovered a weakness in the way iOS generates default passwords for such connections that can leave a user’s device vulnerable to man-in-the-middle attacks,...

CVE-2013-4622

The CVE-2013-4622 entry concerns the HTC Droid Incredible 3G Mobile Hotspot feature, where the device ships with a default WPA2 PSK of 1234567890. The underlying issue is the predictable default passphrase, which can allow a remote attacker within WLAN range to gain access to the hotspot. Documen...

CVE-2013-4622: Undefined Security Weakness

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

PT-2013-5102

Name of the Vulnerable Software and Affected Versions HTC Droid Incredible affected versions not specified Description The issue concerns the 3G Mobile Hotspot feature, which has a default WPA2 PSK passphrase of 1234567890. This makes it easier for remote attackers to obtain access by leveraging ...

Oracle Java SE Multiple Vulnerabilities (June 2013 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than or equal to 7 Update 21, 6 Update 45 or 5 Update 45. It is, therefore, potentially affected by security issues in the following components : - 2D - AWT - CORBA - Deployment - Hotspot -...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous...

CVE-2013-2445

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous...

CVE-2013-2445

CVE-2013-2445 is an unspecified vulnerability in the Java Runtime Environment (JRE)/Hotspot affecting availability via unknown vectors, with a note that it may bypass the Java sandbox through memory allocation error handling. Publicly listed affected products include Oracle Java SE 7 Update 21 an...

CVE-2013-4616

The WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and earlier relies on the UITextChecker suggestWordInLanguage method for selection of Wi-Fi hotspot WPA2 PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack th...

CVE-2013-4616

The CVE-2013-4616 issue affects Apple iOS 6 and earlier, where the WifiPasswordController generateDefaultPassword in Preferences uses UITextChecker suggestWordInLanguage to select WPA2 PSK passphrases. This design can enable a brute‑force attack by reducing the effective search space for hotspot ...

CVE-2013-2445: Undefined Security Weakness

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous...

PT-2013-3779

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 Update 21 Oracle Java SE versions prior to 6 Update 45 Oracle Java SE versions prior to 5.0 Update 45 OpenJDK 7 Description The issue affects the Java Runtime Environment component, allowing remote attackers ...

VulnCheck KEV: CVE-2013-2423

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented...

Oracle Java SE Multiple Vulnerabilities -03 May 13 (Windows)

This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboraclejavasemultvuln03may13win.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Vulnerabilities -03 May 13 Windows Authors: Thanga Prakash S Copyright: Copyright c...

Java Applet Reflection Type Confusion Remote Code Execution (CVE-2013-2423)

An unknown vulnerability has been reported in Java Runtime Environment. The vulnerability is due to unknown vectors related to HotSpot. A remote attacker can exploit this issue by enticing a target user to view a specially crafted web page...

Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x, SL6.x i386/x86_64 (20130424)

Multiple flaws were discovered in the font layout engine in the 2D component. An untrusted Java application or applet could possibly use these flaws to trigger Java Virtual Machine memory corruption. CVE-2013-1569, CVE-2013-2383, CVE-2013-2384 Multiple improper permission check issues were...

RedHat Update for java-1.6.0-openjdk RHSA-2013:0770-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenJDK: Hotspot intrinsic frames vulnerability (Hotspot, 8004336)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the...