CVE-2013-2471 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remot...
HighCVSS 10.0
EPSS 15.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jre | <= 1.7.0 | No fix listed |
| oracle jre | = 1.7.0 | No fix listed |
| oracle jre | = 1.7.0-update1 | No fix listed |
| oracle jre | = 1.7.0-update10 | No fix listed |
| oracle jre | = 1.7.0-update11 | No fix listed |
| oracle jre | = 1.7.0-update13 | No fix listed |
| oracle jre | = 1.7.0-update15 | No fix listed |
| oracle jre | = 1.7.0-update17 | No fix listed |
| oracle jre | = 1.7.0-update2 | No fix listed |
| oracle jre | = 1.7.0-update3 | No fix listed |
| oracle jre | = 1.7.0-update4 | No fix listed |
| oracle jre | = 1.7.0-update5 | No fix listed |
| oracle jre | = 1.7.0-update6 | No fix listed |
| oracle jre | = 1.7.0-update7 | No fix listed |
| oracle jre | = 1.7.0-update9 | No fix listed |
| oracle jre | <= 1.6.0 | No fix listed |
| oracle jre | = 1.6.0-update22 | No fix listed |
| oracle jre | = 1.6.0-update23 | No fix listed |
| oracle jre | = 1.6.0-update24 | No fix listed |
| oracle jre | = 1.6.0-update25 | No fix listed |
| oracle jre | = 1.6.0-update26 | No fix listed |
| oracle jre | = 1.6.0-update27 | No fix listed |
| oracle jre | = 1.6.0-update29 | No fix listed |
| oracle jre | = 1.6.0-update30 | No fix listed |
| oracle jre | = 1.6.0-update31 | No fix listed |
Show 163 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jre | = 1.6.0-update32 | No fix listed |
| oracle jre | = 1.6.0-update33 | No fix listed |
| oracle jre | = 1.6.0-update34 | No fix listed |
| oracle jre | = 1.6.0-update35 | No fix listed |
| oracle jre | = 1.6.0-update37 | No fix listed |
| oracle jre | = 1.6.0-update38 | No fix listed |
| oracle jre | = 1.6.0-update39 | No fix listed |
| oracle jre | = 1.6.0-update41 | No fix listed |
| oracle jre | = 1.6.0-update43 | No fix listed |
| oracle jre | <= 1.5.0 | No fix listed |
| oracle jre | = 1.5.0-update36 | No fix listed |
| oracle jre | = 1.5.0-update38 | No fix listed |
| oracle jre | = 1.5.0-update39 | No fix listed |
| oracle jre | = 1.5.0-update40 | No fix listed |
| oracle jre | = 1.5.0-update41 | No fix listed |
| oracle jdk | <= 1.7.0 | No fix listed |
| oracle jdk | = 1.7.0 | No fix listed |
| oracle jdk | = 1.7.0-update1 | No fix listed |
| oracle jdk | = 1.7.0-update10 | No fix listed |
| oracle jdk | = 1.7.0-update11 | No fix listed |
| oracle jdk | = 1.7.0-update13 | No fix listed |
| oracle jdk | = 1.7.0-update15 | No fix listed |
| oracle jdk | = 1.7.0-update17 | No fix listed |
| oracle jdk | = 1.7.0-update2 | No fix listed |
| oracle jdk | = 1.7.0-update3 | No fix listed |
| oracle jdk | = 1.7.0-update4 | No fix listed |
| oracle jdk | = 1.7.0-update5 | No fix listed |
| oracle jdk | = 1.7.0-update6 | No fix listed |
| oracle jdk | = 1.7.0-update7 | No fix listed |
| oracle jdk | = 1.7.0-update9 | No fix listed |
| oracle jdk | <= 1.6.0 | No fix listed |
| oracle jdk | = 1.6.0-update22 | No fix listed |
| oracle jdk | = 1.6.0-update23 | No fix listed |
| oracle jdk | = 1.6.0-update24 | No fix listed |
| oracle jdk | = 1.6.0-update25 | No fix listed |
| oracle jdk | = 1.6.0-update26 | No fix listed |
| oracle jdk | = 1.6.0-update27 | No fix listed |
| oracle jdk | = 1.6.0-update29 | No fix listed |
| oracle jdk | = 1.6.0-update30 | No fix listed |
| oracle jdk | = 1.6.0-update31 | No fix listed |
| oracle jdk | = 1.6.0-update32 | No fix listed |
| oracle jdk | = 1.6.0-update33 | No fix listed |
| oracle jdk | = 1.6.0-update34 | No fix listed |
| oracle jdk | = 1.6.0-update35 | No fix listed |
| oracle jdk | = 1.6.0-update37 | No fix listed |
| oracle jdk | = 1.6.0-update38 | No fix listed |
| oracle jdk | = 1.6.0-update39 | No fix listed |
| oracle jdk | = 1.6.0-update41 | No fix listed |
| oracle jdk | = 1.6.0-update43 | No fix listed |
| oracle jdk | <= 1.5.0 | No fix listed |
| oracle jdk | = 1.5.0-update36 | No fix listed |
| oracle jdk | = 1.5.0-update38 | No fix listed |
| oracle jdk | = 1.5.0-update39 | No fix listed |
| oracle jdk | = 1.5.0-update40 | No fix listed |
| oracle jdk | = 1.5.0-update41 | No fix listed |
| sun jre | = 1.6.0 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_10 | No fix listed |
| sun jre | = 1.6.0-update_11 | No fix listed |
| sun jre | = 1.6.0-update_12 | No fix listed |
| sun jre | = 1.6.0-update_13 | No fix listed |
| sun jre | = 1.6.0-update_14 | No fix listed |
| sun jre | = 1.6.0-update_15 | No fix listed |
| sun jre | = 1.6.0-update_16 | No fix listed |
| sun jre | = 1.6.0-update_17 | No fix listed |
| sun jre | = 1.6.0-update_18 | No fix listed |
| sun jre | = 1.6.0-update_19 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun jre | = 1.6.0-update_20 | No fix listed |
| sun jre | = 1.6.0-update_21 | No fix listed |
| sun jre | = 1.6.0-update_3 | No fix listed |
| sun jre | = 1.6.0-update_4 | No fix listed |
| sun jre | = 1.6.0-update_5 | No fix listed |
| sun jre | = 1.6.0-update_6 | No fix listed |
| sun jre | = 1.6.0-update_7 | No fix listed |
| sun jre | = 1.6.0-update_9 | No fix listed |
| sun jre | = 1.5.0 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
| sun jre | = 1.5.0-update12 | No fix listed |
| sun jre | = 1.5.0-update13 | No fix listed |
| sun jre | = 1.5.0-update14 | No fix listed |
| sun jre | = 1.5.0-update15 | No fix listed |
| sun jre | = 1.5.0-update16 | No fix listed |
| sun jre | = 1.5.0-update17 | No fix listed |
| sun jre | = 1.5.0-update18 | No fix listed |
| sun jre | = 1.5.0-update19 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update20 | No fix listed |
| sun jre | = 1.5.0-update21 | No fix listed |
| sun jre | = 1.5.0-update22 | No fix listed |
| sun jre | = 1.5.0-update23 | No fix listed |
| sun jre | = 1.5.0-update24 | No fix listed |
| sun jre | = 1.5.0-update25 | No fix listed |
| sun jre | = 1.5.0-update26 | No fix listed |
| sun jre | = 1.5.0-update27 | No fix listed |
| sun jre | = 1.5.0-update28 | No fix listed |
| sun jre | = 1.5.0-update29 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update31 | No fix listed |
| sun jre | = 1.5.0-update33 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun jdk | = 1.6.0 | No fix listed |
| sun jdk | = 1.6.0-update_10 | No fix listed |
| sun jdk | = 1.6.0-update_11 | No fix listed |
| sun jdk | = 1.6.0-update_12 | No fix listed |
| sun jdk | = 1.6.0-update_13 | No fix listed |
| sun jdk | = 1.6.0-update_14 | No fix listed |
| sun jdk | = 1.6.0-update_15 | No fix listed |
| sun jdk | = 1.6.0-update_16 | No fix listed |
| sun jdk | = 1.6.0-update_17 | No fix listed |
| sun jdk | = 1.6.0-update_18 | No fix listed |
| sun jdk | = 1.6.0-update_19 | No fix listed |
| sun jdk | = 1.6.0-update_20 | No fix listed |
| sun jdk | = 1.6.0-update_21 | No fix listed |
| sun jdk | = 1.6.0-update_3 | No fix listed |
| sun jdk | = 1.6.0-update_4 | No fix listed |
| sun jdk | = 1.6.0-update_5 | No fix listed |
| sun jdk | = 1.6.0-update_6 | No fix listed |
| sun jdk | = 1.6.0-update_7 | No fix listed |
| sun jdk | = 1.6.0-update1 | No fix listed |
| sun jdk | = 1.6.0-update1_b06 | No fix listed |
| sun jdk | = 1.6.0-update2 | No fix listed |
| sun jdk | = 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update11 | No fix listed |
| sun jdk | = 1.5.0-update11_b03 | No fix listed |
| sun jdk | = 1.5.0-update12 | No fix listed |
| sun jdk | = 1.5.0-update13 | No fix listed |
| sun jdk | = 1.5.0-update14 | No fix listed |
| sun jdk | = 1.5.0-update15 | No fix listed |
| sun jdk | = 1.5.0-update16 | No fix listed |
| sun jdk | = 1.5.0-update17 | No fix listed |
| sun jdk | = 1.5.0-update18 | No fix listed |
| sun jdk | = 1.5.0-update19 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update20 | No fix listed |
| sun jdk | = 1.5.0-update21 | No fix listed |
| sun jdk | = 1.5.0-update22 | No fix listed |
| sun jdk | = 1.5.0-update23 | No fix listed |
| sun jdk | = 1.5.0-update24 | No fix listed |
| sun jdk | = 1.5.0-update25 | No fix listed |
| sun jdk | = 1.5.0-update26 | No fix listed |
| sun jdk | = 1.5.0-update27 | No fix listed |
| sun jdk | = 1.5.0-update28 | No fix listed |
| sun jdk | = 1.5.0-update29 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update31 | No fix listed |
| sun jdk | = 1.5.0-update33 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update6 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update7_b03 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
References
- advisories.mageia.org
- SSRT101305 vendor-advisory
- hg.openjdk.java.net
- SUSE-SU-2013:1255 vendor-advisory
- SUSE-SU-2013:1256 vendor-advisory
- SUSE-SU-2013:1257 vendor-advisory
- SUSE-SU-2013:1263 vendor-advisory
- SUSE-SU-2013:1264 vendor-advisory
- SUSE-SU-2013:1293 vendor-advisory
- SUSE-SU-2013:1305 vendor-advisory
- HPSBUX02907 vendor-advisory
- HPSBUX02908 vendor-advisory
- RHSA-2013:0963 vendor-advisory
- RHSA-2013:1059 vendor-advisory
- RHSA-2013:1060 vendor-advisory
- RHSA-2013:1081 vendor-advisory
- RHSA-2013:1455 vendor-advisory
- RHSA-2013:1456 vendor-advisory
- 54154 third-party-advisory
- GLSA-201406-32 vendor-advisory
- www-01.ibm.com
- MDVSA-2013:183 vendor-advisory
- www.oracle.com vendor-advisory
- 60659 vdb-entry
- TA13-169A third-party-advisory us-government-resource
- RHSA-2014:0414 vendor-advisory
- bugzilla.redhat.com
- oval:org.mitre.oval:def:16840 signature vdb-entry
- oval:org.mitre.oval:def:19295 signature vdb-entry
- oval:org.mitre.oval:def:19413 signature vdb-entry
- oval:org.mitre.oval:def:19441 signature vdb-entry