Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-2428
HistoryApr 17, 2013 - 12:00 a.m.

CVE-2013-2428

2013-04-1700:00:00
ubuntu.com
ubuntu.com
7

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.162 Low

EPSS

Percentile

95.9%

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to JavaFX, a different
vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2427.

Notes

Author Note
mdeslaur in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked as of 2013-04-19, IcedTea has not released 1.12.5 to fix this issue does not affect icedtea 2.3

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.162 Low

EPSS

Percentile

95.9%