CVE

Id
61435  
CVE No.
CVE-2013-1488  
Status
Candidate  
Description
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.  
Phase
Assigned (20130130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
615121 61435 CVE-2013-1488 MLIST:[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
615122 61435 CVE-2013-1488 URL:http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html  View
615123 61435 CVE-2013-1488 MISC:http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157  View
615124 61435 CVE-2013-1488 MISC:http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/  View
615125 61435 CVE-2013-1488 MISC:https://twitter.com/thezdi/status/309425888188043264  View
615126 61435 CVE-2013-1488 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/a19614a3dabb  View
615127 61435 CVE-2013-1488 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=920247  View
615128 61435 CVE-2013-1488 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
615129 61435 CVE-2013-1488 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
615130 61435 CVE-2013-1488 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
615131 61435 CVE-2013-1488 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
615132 61435 CVE-2013-1488 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View
615133 61435 CVE-2013-1488 GENTOO:GLSA-201406-32  View
615134 61435 CVE-2013-1488 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
615135 61435 CVE-2013-1488 MANDRIVA:MDVSA-2013:145  View
615136 61435 CVE-2013-1488 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:145  View
615137 61435 CVE-2013-1488 MANDRIVA:MDVSA-2013:161  View
615138 61435 CVE-2013-1488 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:161  View
615139 61435 CVE-2013-1488 REDHAT:RHSA-2013:0752  View
615140 61435 CVE-2013-1488 URL:http://rhn.redhat.com/errata/RHSA-2013-0752.html  View
615141 61435 CVE-2013-1488 REDHAT:RHSA-2013:0757  View
615142 61435 CVE-2013-1488 URL:http://rhn.redhat.com/errata/RHSA-2013-0757.html  View
615143 61435 CVE-2013-1488 SUSE:SUSE-SU-2013:0814  View
615144 61435 CVE-2013-1488 URL:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html  View
615145 61435 CVE-2013-1488 SUSE:openSUSE-SU-2013:0777  View
615146 61435 CVE-2013-1488 URL:http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html  View
615147 61435 CVE-2013-1488 SUSE:openSUSE-SU-2013:0964  View
615148 61435 CVE-2013-1488 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html  View
615149 61435 CVE-2013-1488 UBUNTU:USN-1806-1  View
615150 61435 CVE-2013-1488 URL:http://www.ubuntu.com/usn/USN-1806-1  View
615151 61435 CVE-2013-1488 CERT:TA13-107A  View
615152 61435 CVE-2013-1488 URL:http://www.us-cert.gov/ncas/alerts/TA13-107A  View
615153 61435 CVE-2013-1488 OVAL:oval:org.mitre.oval:def:16511  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20173 JVNDB-2013-001748 Oracle Java SE の Java Runtime Environment の 2D における任意のコードを実行される脆弱性 Oracle Java SE の Java Runtime Environment の 2D における色の管理 (CMM) 機能には、任意のコードを実行される、またはサービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2013-1493 61435 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001748.html  View