Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2013-1491
HistoryMar 08, 2013 - 12:00 a.m.

CVE-2013-1491

2013-03-0800:00:00
ubuntu.com
ubuntu.com
11

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.823

Percentile

98.4%

JSON

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17
and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX
2.2.7 and earlier allows remote attackers to execute arbitrary code via
vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own
competition at CanSecWest 2013.

Notes

Author Note
jdstrand appears to be Oracle 7 only (ie, not OpenJDK)

Related

prion 3
nvd 3
veracode 1
checkpoint_advisories 1
zdi 1
cvelist 3
cve 3
ubuntucve 2
nessus 23
suse 6
openvas 7
redhat 7
securityvulns 2
ibm 15
gentoo 1
prion
prion
Design/Logic Flaw
2013-03-08 18:55:00
Design/Logic Flaw
2013-04-17 18:55:00
Design/Logic Flaw
2013-04-17 18:55:00
nvd
nvd
CVE-2013-1491
2013-03-08 18:55:01
CVE-2013-2432
2013-04-17 18:55:07
CVE-2013-2394
2013-04-17 18:55:06
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:54:50
checkpoint_advisories
checkpoint_advisories
Oracle Java Font Processing Memory Corruption (CVE-2013-1491)
2013-06-30 00:00:00
zdi
zdi
(Pwn2Own) Oracle Java Font Handling Remote Code Execution Vulnerability
2013-05-10 00:00:00
cvelist
cvelist
CVE-2013-1491
2013-03-08 18:00:00
CVE-2013-2394
2013-04-17 15:00:00
CVE-2013-2432
2013-04-17 15:00:00
cve
cve
CVE-2013-1491
2013-03-08 18:55:01
CVE-2013-2394
2013-04-17 18:55:06
CVE-2013-2432
2013-04-17 18:55:07
ubuntucve
ubuntucve
CVE-2013-2394
2013-04-17 00:00:00
CVE-2013-2432
2013-04-17 00:00:00
nessus
nessus
SuSE 11.2 Security Update : Java 1.4.2 (SAT Patch Number 7793)
2013-06-11 00:00:00
SuSE 10 Security Update : Java 1.4.2 (ZYPP Patch Number 8601)
2013-06-11 00:00:00
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2013:0855)
2013-05-23 00:00:00
suse
suse
Security update for Java 1.4.2 (important)
2013-06-10 18:09:23
Security update for IBM Java (important)
2013-07-02 19:04:22
Security update for IBM Java 1.7.0 (important)
2013-06-10 15:04:12
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:0934-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0835-2)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0835-3)
2021-06-09 00:00:00
redhat
redhat
(RHSA-2013:0855) Important: java-1.5.0-ibm security update
2013-05-22 00:00:00
(RHSA-2013:0823) Critical: java-1.6.0-ibm security update
2013-05-14 00:00:00
(RHSA-2013:0758) Critical: java-1.6.0-sun security update
2013-04-18 00:00:00
securityvulns
securityvulns
APPLE-SA-2013-04-16-2 Java for OS X 2013-003 and Mac OS X v10.6 Update 15
2013-04-22 00:00:00
Oracle Java / OpenJDK multiple security vulnerabilities
2013-04-22 00:00:00
ibm
ibm
IBM WebSphere Cast Iron Security Bulletin: Multiple security vulnerabilities in IBM JRE 6
2018-06-15 06:56:55
Security Bulletin: Information regarding security vulnerability in IBM SDK for Java that is shipped with IBM WebSphere Application Server and addressed by Oracle CPU April 2013 (CVE-2013-0169)
2022-09-25 21:06:56
Security Bulletin: WebSphere Application Server Community Edition 3.0.0.3 Oracle CPU April 2013
2022-09-25 21:06:56
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.823

Percentile

98.4%

JSON
Related for UB:CVE-2013-1491
prion3nvd3veracode1checkpoint_advisories1zdi1cvelist3cve3ubuntucve2nessus23suse6openvas7redhat7securityvulns2ibm15gentoo1