CVE

Id
60388  
CVE No.
CVE-2013-0441  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-1476 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via certain methods that should not be serialized, aka "missing serialization restriction."  
Phase
Assigned (20121207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
609605 60388 CVE-2013-0441 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html  View
609606 60388 CVE-2013-0441 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907458  View
609607 60388 CVE-2013-0441 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS  View
609608 60388 CVE-2013-0441 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/corba/rev/307ddc7799c7  View
609609 60388 CVE-2013-0441 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056  View
609610 60388 CVE-2013-0441 GENTOO:GLSA-201406-32  View
609611 60388 CVE-2013-0441 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
609612 60388 CVE-2013-0441 HP:HPSBUX02864  View
609613 60388 CVE-2013-0441 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
609614 60388 CVE-2013-0441 HP:SSRT101156  View
609615 60388 CVE-2013-0441 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
609616 60388 CVE-2013-0441 HP:HPSBMU02874  View
609617 60388 CVE-2013-0441 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
609618 60388 CVE-2013-0441 HP:HPSBUX02857  View
609619 60388 CVE-2013-0441 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
609620 60388 CVE-2013-0441 HP:SSRT101103  View
609621 60388 CVE-2013-0441 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
609622 60388 CVE-2013-0441 HP:SSRT101184  View
609623 60388 CVE-2013-0441 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
609624 60388 CVE-2013-0441 MANDRIVA:MDVSA-2013:095  View
609625 60388 CVE-2013-0441 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:095  View
609626 60388 CVE-2013-0441 REDHAT:RHSA-2013:0236  View
609627 60388 CVE-2013-0441 URL:http://rhn.redhat.com/errata/RHSA-2013-0236.html  View
609628 60388 CVE-2013-0441 REDHAT:RHSA-2013:0237  View
609629 60388 CVE-2013-0441 URL:http://rhn.redhat.com/errata/RHSA-2013-0237.html  View
609630 60388 CVE-2013-0441 REDHAT:RHSA-2013:0245  View
609631 60388 CVE-2013-0441 URL:http://rhn.redhat.com/errata/RHSA-2013-0245.html  View
609632 60388 CVE-2013-0441 REDHAT:RHSA-2013:0246  View
609633 60388 CVE-2013-0441 URL:http://rhn.redhat.com/errata/RHSA-2013-0246.html  View
609634 60388 CVE-2013-0441 REDHAT:RHSA-2013:0247  View
609635 60388 CVE-2013-0441 URL:http://rhn.redhat.com/errata/RHSA-2013-0247.html  View
609636 60388 CVE-2013-0441 REDHAT:RHSA-2013:1455  View
609637 60388 CVE-2013-0441 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
609638 60388 CVE-2013-0441 REDHAT:RHSA-2013:1456  View
609639 60388 CVE-2013-0441 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
609640 60388 CVE-2013-0441 SUSE:openSUSE-SU-2013:0312  View
609641 60388 CVE-2013-0441 URL:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html  View
609642 60388 CVE-2013-0441 SUSE:openSUSE-SU-2013:0377  View
609643 60388 CVE-2013-0441 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html  View
609644 60388 CVE-2013-0441 CERT:TA13-032A  View
609645 60388 CVE-2013-0441 URL:http://www.us-cert.gov/cas/techalerts/TA13-032A.html  View
609646 60388 CVE-2013-0441 CERT-VN:VU#858729  View
609647 60388 CVE-2013-0441 URL:http://www.kb.cert.org/vuls/id/858729  View
609648 60388 CVE-2013-0441 OVAL:oval:org.mitre.oval:def:16566  View
609649 60388 CVE-2013-0441 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16566  View
609650 60388 CVE-2013-0441 OVAL:oval:org.mitre.oval:def:19266  View
609651 60388 CVE-2013-0441 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19266  View
609652 60388 CVE-2013-0441 OVAL:oval:org.mitre.oval:def:19289  View
609653 60388 CVE-2013-0441 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19289  View
609654 60388 CVE-2013-0441 OVAL:oval:org.mitre.oval:def:19509  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19816 JVNDB-2013-001391 Oracle Java SE の Java Runtime Environment における Deployment の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、Deployment に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-0446 60388 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001391.html  View