CVE

Id
61423  
CVE No.
CVE-2013-1476  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-0441 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via "certain value handler constructors."  
Phase
Assigned (20130130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
614810 61423 CVE-2013-1476 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html  View
614811 61423 CVE-2013-1476 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907457  View
614812 61423 CVE-2013-1476 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS  View
614813 61423 CVE-2013-1476 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/corba/rev/5116fe321210  View
614814 61423 CVE-2013-1476 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056  View
614815 61423 CVE-2013-1476 GENTOO:GLSA-201406-32  View
614816 61423 CVE-2013-1476 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
614817 61423 CVE-2013-1476 HP:HPSBUX02864  View
614818 61423 CVE-2013-1476 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
614819 61423 CVE-2013-1476 HP:SSRT101156  View
614820 61423 CVE-2013-1476 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
614821 61423 CVE-2013-1476 HP:HPSBMU02874  View
614822 61423 CVE-2013-1476 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
614823 61423 CVE-2013-1476 HP:HPSBUX02857  View
614824 61423 CVE-2013-1476 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
614825 61423 CVE-2013-1476 HP:SSRT101103  View
614826 61423 CVE-2013-1476 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
614827 61423 CVE-2013-1476 HP:SSRT101184  View
614828 61423 CVE-2013-1476 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
614829 61423 CVE-2013-1476 MANDRIVA:MDVSA-2013:095  View
614830 61423 CVE-2013-1476 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:095  View
614831 61423 CVE-2013-1476 REDHAT:RHSA-2013:0236  View
614832 61423 CVE-2013-1476 URL:http://rhn.redhat.com/errata/RHSA-2013-0236.html  View
614833 61423 CVE-2013-1476 REDHAT:RHSA-2013:0237  View
614834 61423 CVE-2013-1476 URL:http://rhn.redhat.com/errata/RHSA-2013-0237.html  View
614835 61423 CVE-2013-1476 REDHAT:RHSA-2013:0245  View
614836 61423 CVE-2013-1476 URL:http://rhn.redhat.com/errata/RHSA-2013-0245.html  View
614837 61423 CVE-2013-1476 REDHAT:RHSA-2013:0246  View
614838 61423 CVE-2013-1476 URL:http://rhn.redhat.com/errata/RHSA-2013-0246.html  View
614839 61423 CVE-2013-1476 REDHAT:RHSA-2013:0247  View
614840 61423 CVE-2013-1476 URL:http://rhn.redhat.com/errata/RHSA-2013-0247.html  View
614841 61423 CVE-2013-1476 REDHAT:RHSA-2013:1455  View
614842 61423 CVE-2013-1476 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
614843 61423 CVE-2013-1476 REDHAT:RHSA-2013:1456  View
614844 61423 CVE-2013-1476 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
614845 61423 CVE-2013-1476 SUSE:openSUSE-SU-2013:0312  View
614846 61423 CVE-2013-1476 URL:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html  View
614847 61423 CVE-2013-1476 SUSE:openSUSE-SU-2013:0377  View
614848 61423 CVE-2013-1476 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html  View
614849 61423 CVE-2013-1476 SUSE:SUSE-SU-2013:0478  View
614850 61423 CVE-2013-1476 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html  View
614851 61423 CVE-2013-1476 CERT:TA13-032A  View
614852 61423 CVE-2013-1476 URL:http://www.us-cert.gov/cas/techalerts/TA13-032A.html  View
614853 61423 CVE-2013-1476 CERT-VN:VU#858729  View
614854 61423 CVE-2013-1476 URL:http://www.kb.cert.org/vuls/id/858729  View
614855 61423 CVE-2013-1476 OVAL:oval:org.mitre.oval:def:16652  View
614856 61423 CVE-2013-1476 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16652  View
614857 61423 CVE-2013-1476 OVAL:oval:org.mitre.oval:def:19466  View
614858 61423 CVE-2013-1476 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19466  View
614859 61423 CVE-2013-1476 OVAL:oval:org.mitre.oval:def:19475  View
614860 61423 CVE-2013-1476 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19475  View
614861 61423 CVE-2013-1476 OVAL:oval:org.mitre.oval:def:19507  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19789 JVNDB-2013-001364 Oracle Java SE の Java Runtime Environment におけるサウンドの処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、サウンドに関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-1481 61423 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001364.html  View