Lucene search
UbuntuUSN-1693-1HistoryJan 16, 2013 - 12:00 a.m.
OpenJDK 7 vulnerabilities
2013-01-1600:00:00
ubuntu.com
58
7.3 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Releases
- Ubuntu 12.10
Packages
- openjdk-7 - Open Source Java implementation
Details
It was discovered that OpenJDK 7โs security mechanism could be bypassed via
Java applets. If a user were tricked into opening a malicious website, a
remote attacker could exploit this to perform arbitrary code execution as
the user invoking the program.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 12.10 | noarch | openjdk-7-jre-zero | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | icedtea-7-jre-cacao | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | icedtea-7-jre-jamvm | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | openjdk-7-dbg | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | openjdk-7-demo | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | openjdk-7-jdk | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | openjdk-7-jre | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | openjdk-7-jre-headless | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | openjdk-7-jre-lib | <ย 7u9-2.3.4-0ubuntu1.12.10.1 | UNKNOWN |
Related
openvas
openvas
Fedora Update for java-1.7.0-openjdk FEDORA-2013-0853
2013-01-21 00:00:00
CentOS Update for java CESA-2013:0165 centos5
2013-01-21 00:00:00
Ubuntu Update for openjdk-7 USN-1693-1
2013-01-21 00:00:00
nessus
nessus
Fedora 17 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17 (2013-0868)
2013-01-17 00:00:00
Oracle Java SE 7 < Update 11 Multiple Vulnerabilities (Unix)
2013-02-22 00:00:00
Fedora 16 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16 (2013-0888)
2013-01-17 00:00:00
cve
cve
CVE-2012-3174
2013-01-14 22:55:00
CVE-2013-0422
2013-01-10 21:55:00
prion
prion
Design/Logic Flaw
2013-01-14 22:55:00
Design/Logic Flaw
2013-01-10 21:55:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2013-01-16 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc18
2013-01-16 19:35:17
[SECURITY] Fedora 17 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17
2013-01-16 19:42:39
[SECURITY] Fedora 16 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16
2013-01-16 19:49:12
suse
suse
java-1_7_0-openjdk: update to icedtea-2.3.4 (critical)
2013-01-25 14:04:23
Security update for Java (important)
2013-03-13 00:05:30
ubuntucve
ubuntucve
CVE-2012-3174
2013-01-14 00:00:00
CVE-2013-0422
2013-01-10 00:00:00
seebug
seebug
Oracle Java 7 JmxMBeanServer็ฑป่ฟ็จไปฃ็ ๆง่กๆผๆด
2013-01-14 00:00:00
Java Applet JMX Remote Code Execution
2014-07-01 00:00:00
redhat
redhat
(RHSA-2013:0165) Important: java-1.7.0-openjdk security update
2013-01-16 00:00:00
(RHSA-2013:0156) Critical: java-1.7.0-oracle security update
2013-01-14 00:00:00
(RHSA-2013:0626) Critical: java-1.7.0-ibm security update
2013-03-11 00:00:00
cert
cert
Java 7 fails to restrict access to privileged code
2013-01-10 00:00:00
centos
centos
java security update
2013-01-16 20:29:20
zdi
zdi
attackerkb
attackerkb
CVE-2013-0422
2013-01-10 00:00:00
amazon
amazon
Important: java-1.7.0-openjdk
2013-02-03 12:35:00
veracode
veracode
Authorization Bypass
2019-01-15 08:53:56
Sandbox Restrictions Bypass
2019-05-02 04:46:00
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
0-day vulnerability in Oracle Java is used to install maliscious software
2013-01-21 00:00:00
[SE-2012-01] Java 7 Update 11 confirmed to be vulnerable
2013-01-21 00:00:00
threatpost
threatpost
NBC Website Hacked, Leading Visitors to Citadel Banking Malware
2013-02-21 21:07:10
ADP-Themed Phishing Emails Lead to Blackhole Sites
2013-01-14 18:29:21
Emergency Zero-Day Patch Does Not Quiet Calls to Disable Java
2013-01-14 16:40:39
zdt
zdt
Java Applet JMX Remote Code Execution Vulnerability
2013-01-11 00:00:00
ibm
ibm
packetstorm
packetstorm
Java Applet JMX Remote Code Execution
2013-01-11 00:00:00
symantec
symantec
thn
thn
Oracle Patches Java Zero Day Vulnerability
2013-01-16 06:01:00
Oracle Patches Java Zero Day Vulnerability
2013-01-16 17:01:00
saint
saint
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
canvas
canvas
Immunity Canvas: JAVA_MBEANINSTANTIATOR_FINDCLASS
2013-01-10 21:55:00
cisa_kev
cisa_kev
Oracle JRE Remote Code Execution Vulnerability
2022-05-25 00:00:00
metasploit
metasploit
Java Applet JMX Remote Code Execution
2013-01-10 19:30:43
exploitdb
exploitdb
Java Applet JMX - Remote Code Execution (Metasploit) (1)
2013-01-11 00:00:00
freebsd
freebsd
java 7.x -- security manager bypass
2013-01-10 00:00:00
fireeye
fireeye
securelist
securelist
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00
7.3 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for USN-1693-1