CVE-2013-2419

2013-04-1700:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.057

Percentile

93.4%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0
Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to
affect availability via unknown vectors related to 2D. NOTE: the previous
information is from the April 2013 CPU. Oracle has not commented on claims
from another vendor that this issue is related to “font processing errors”
in the International Components for Unicode (ICU) Layout Engine before
51.2.

Bugs

Notes

Author	Note
mdeslaur	in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand	sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked as of 2013-04-19, IcedTea has not released 2.3.9 or 1.12.5 to fix this issue

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchicu< 4.8.1.1-3ubuntu0.3UNKNOWN
ubuntu10.04noarchopenjdk-6< 6b27-1.12.5-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchopenjdk-6< 6b27-1.12.5-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchopenjdk-6< 6b27-1.12.5-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchopenjdk-6< 6b27-1.12.5-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchopenjdk-6< 6b27-1.12.5-1ubuntu1UNKNOWN
ubuntu11.10noarchopenjdk-7< 7u21-2.3.9-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchopenjdk-7< 7u21-2.3.9-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchopenjdk-7< 7u21-2.3.9-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchopenjdk-7< 7u21-2.3.9-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	icu	< 4.8.1.1-3ubuntu0.3	UNKNOWN
ubuntu	10.04	noarch	openjdk-6	< 6b27-1.12.5-0ubuntu0.10.04.1	UNKNOWN
ubuntu	11.10	noarch	openjdk-6	< 6b27-1.12.5-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	openjdk-6	< 6b27-1.12.5-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	openjdk-6	< 6b27-1.12.5-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	openjdk-6	< 6b27-1.12.5-1ubuntu1	UNKNOWN
ubuntu	11.10	noarch	openjdk-7	< 7u21-2.3.9-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	openjdk-7	< 7u21-2.3.9-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	openjdk-7	< 7u21-2.3.9-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	openjdk-7	< 7u21-2.3.9-1ubuntu1	UNKNOWN