CVE

Id
61427  
CVE No.
CVE-2013-1480  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" in awt_parseImage.c, which triggers memory corruption.  
Phase
Assigned (20130130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
614935 61427 CVE-2013-1480 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html  View
614936 61427 CVE-2013-1480 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS  View
614937 61427 CVE-2013-1480 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/50e268c1fb1f  View
614938 61427 CVE-2013-1480 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=906904  View
614939 61427 CVE-2013-1480 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056  View
614940 61427 CVE-2013-1480 GENTOO:GLSA-201406-32  View
614941 61427 CVE-2013-1480 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
614942 61427 CVE-2013-1480 HP:HPSBUX02864  View
614943 61427 CVE-2013-1480 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
614944 61427 CVE-2013-1480 HP:SSRT101156  View
614945 61427 CVE-2013-1480 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
614946 61427 CVE-2013-1480 HP:HPSBMU02874  View
614947 61427 CVE-2013-1480 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
614948 61427 CVE-2013-1480 HP:HPSBUX02857  View
614949 61427 CVE-2013-1480 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
614950 61427 CVE-2013-1480 HP:SSRT101103  View
614951 61427 CVE-2013-1480 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
614952 61427 CVE-2013-1480 HP:SSRT101184  View
614953 61427 CVE-2013-1480 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
614954 61427 CVE-2013-1480 MANDRIVA:MDVSA-2013:095  View
614955 61427 CVE-2013-1480 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:095  View
614956 61427 CVE-2013-1480 REDHAT:RHSA-2013:0236  View
614957 61427 CVE-2013-1480 URL:http://rhn.redhat.com/errata/RHSA-2013-0236.html  View
614958 61427 CVE-2013-1480 REDHAT:RHSA-2013:0237  View
614959 61427 CVE-2013-1480 URL:http://rhn.redhat.com/errata/RHSA-2013-0237.html  View
614960 61427 CVE-2013-1480 REDHAT:RHSA-2013:0245  View
614961 61427 CVE-2013-1480 URL:http://rhn.redhat.com/errata/RHSA-2013-0245.html  View
614962 61427 CVE-2013-1480 REDHAT:RHSA-2013:0246  View
614963 61427 CVE-2013-1480 URL:http://rhn.redhat.com/errata/RHSA-2013-0246.html  View
614964 61427 CVE-2013-1480 REDHAT:RHSA-2013:0247  View
614965 61427 CVE-2013-1480 URL:http://rhn.redhat.com/errata/RHSA-2013-0247.html  View
614966 61427 CVE-2013-1480 REDHAT:RHSA-2013:1455  View
614967 61427 CVE-2013-1480 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
614968 61427 CVE-2013-1480 REDHAT:RHSA-2013:1456  View
614969 61427 CVE-2013-1480 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
614970 61427 CVE-2013-1480 SUSE:openSUSE-SU-2013:0377  View
614971 61427 CVE-2013-1480 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html  View
614972 61427 CVE-2013-1480 SUSE:SUSE-SU-2013:0478  View
614973 61427 CVE-2013-1480 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html  View
614974 61427 CVE-2013-1480 CERT:TA13-032A  View
614975 61427 CVE-2013-1480 URL:http://www.us-cert.gov/cas/techalerts/TA13-032A.html  View
614976 61427 CVE-2013-1480 CERT-VN:VU#858729  View
614977 61427 CVE-2013-1480 URL:http://www.kb.cert.org/vuls/id/858729  View
614978 61427 CVE-2013-1480 OVAL:oval:org.mitre.oval:def:16045  View
614979 61427 CVE-2013-1480 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16045  View
614980 61427 CVE-2013-1480 OVAL:oval:org.mitre.oval:def:18845  View
614981 61427 CVE-2013-1480 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:18845  View
614982 61427 CVE-2013-1480 OVAL:oval:org.mitre.oval:def:19351  View
614983 61427 CVE-2013-1480 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19351  View
614984 61427 CVE-2013-1480 OVAL:oval:org.mitre.oval:def:19504  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20059 JVNDB-2013-001634 Oracle Java SE の Java Runtime Environment におけるライブラリの処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、ライブラリに関する処理に不備があるため、完全性に影響のある脆弱性が存在します。 CVE-2013-1485 61427 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001634.html  View