CVE-2013-1569

2013-04-1700:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.052 Low

EPSS

Percentile

92.9%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0
Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to
affect confidentiality, integrity, and availability via unknown vectors
related to 2D. NOTE: the previous information is from the April 2013 CPU.
Oracle has not commented on claims from another vendor that this issue is
related to “checking of [a] glyph table” in the International Components
for Unicode (ICU) Layout Engine before 51.2.

Bugs

Notes

Author	Note
mdeslaur	in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand	sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked as of 2013-04-19, IcedTea has not released 2.3.9 or 1.12.5 to fix this issue

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchicu< 4.8.1.1-3ubuntu0.3UNKNOWN
ubuntu10.04noarchopenjdk-6< 6b27-1.12.5-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchopenjdk-6< 6b27-1.12.5-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchopenjdk-6< 6b27-1.12.5-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchopenjdk-6< 6b27-1.12.5-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchopenjdk-6< 6b27-1.12.5-1ubuntu1UNKNOWN
ubuntu11.10noarchopenjdk-7< 7u21-2.3.9-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchopenjdk-7< 7u21-2.3.9-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchopenjdk-7< 7u21-2.3.9-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchopenjdk-7< 7u21-2.3.9-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	icu	< 4.8.1.1-3ubuntu0.3	UNKNOWN
ubuntu	10.04	noarch	openjdk-6	< 6b27-1.12.5-0ubuntu0.10.04.1	UNKNOWN
ubuntu	11.10	noarch	openjdk-6	< 6b27-1.12.5-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	openjdk-6	< 6b27-1.12.5-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	openjdk-6	< 6b27-1.12.5-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	openjdk-6	< 6b27-1.12.5-1ubuntu1	UNKNOWN
ubuntu	11.10	noarch	openjdk-7	< 7u21-2.3.9-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	openjdk-7	< 7u21-2.3.9-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	openjdk-7	< 7u21-2.3.9-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	openjdk-7	< 7u21-2.3.9-1ubuntu1	UNKNOWN