CVE

Id
62362  
CVE No.
CVE-2013-2415  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "processing of MTOM attachments" and the creation of temporary files with weak permissions.  
Phase
Assigned (20130305)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
622988 62362 CVE-2013-2415 MLIST:[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
622989 62362 CVE-2013-2415 URL:http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html  View
622990 62362 CVE-2013-2415 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxws/rev/e07c518282ba  View
622991 62362 CVE-2013-2415 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=952389  View
622992 62362 CVE-2013-2415 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
622993 62362 CVE-2013-2415 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
622994 62362 CVE-2013-2415 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
622995 62362 CVE-2013-2415 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
622996 62362 CVE-2013-2415 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View
622997 62362 CVE-2013-2415 GENTOO:GLSA-201406-32  View
622998 62362 CVE-2013-2415 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
622999 62362 CVE-2013-2415 MANDRIVA:MDVSA-2013:150  View
623000 62362 CVE-2013-2415 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:150  View
623001 62362 CVE-2013-2415 MANDRIVA:MDVSA-2013:145  View
623002 62362 CVE-2013-2415 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:145  View
623003 62362 CVE-2013-2415 MANDRIVA:MDVSA-2013:161  View
623004 62362 CVE-2013-2415 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:161  View
623005 62362 CVE-2013-2415 REDHAT:RHSA-2013:0752  View
623006 62362 CVE-2013-2415 URL:http://rhn.redhat.com/errata/RHSA-2013-0752.html  View
623007 62362 CVE-2013-2415 REDHAT:RHSA-2013:0757  View
623008 62362 CVE-2013-2415 URL:http://rhn.redhat.com/errata/RHSA-2013-0757.html  View
623009 62362 CVE-2013-2415 SUSE:SUSE-SU-2013:0814  View
623010 62362 CVE-2013-2415 URL:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html  View
623011 62362 CVE-2013-2415 SUSE:openSUSE-SU-2013:0777  View
623012 62362 CVE-2013-2415 URL:http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html  View
623013 62362 CVE-2013-2415 SUSE:openSUSE-SU-2013:0964  View
623014 62362 CVE-2013-2415 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html  View
623015 62362 CVE-2013-2415 UBUNTU:USN-1806-1  View
623016 62362 CVE-2013-2415 URL:http://www.ubuntu.com/usn/USN-1806-1  View
623017 62362 CVE-2013-2415 CERT:TA13-107A  View
623018 62362 CVE-2013-2415 URL:http://www.us-cert.gov/ncas/alerts/TA13-107A  View
623019 62362 CVE-2013-2415 OVAL:oval:org.mitre.oval:def:16011  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20819 JVNDB-2013-002394 Oracle Java SE の Java Runtime Environment における 2D の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) および OpenJDK には、2D に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-2420 62362 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002394.html  View