CVE

Id
62370  
CVE No.
CVE-2013-2423  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.  
Phase
Assigned (20130305)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
623299 62370 CVE-2013-2423 EXPLOIT-DB:24976  View
623300 62370 CVE-2013-2423 URL:http://www.exploit-db.com/exploits/24976  View
623301 62370 CVE-2013-2423 MISC:http://blog.spiderlabs.com/2013/04/java-is-so-confusing.html  View
623302 62370 CVE-2013-2423 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b453d9be6b3f  View
623303 62370 CVE-2013-2423 MISC:http://weblog.ikvm.net/PermaLink.aspx?guid=acd2dd6d-1028-4996-95df-efa42ac237f0  View
623304 62370 CVE-2013-2423 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
623305 62370 CVE-2013-2423 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=952398  View
623306 62370 CVE-2013-2423 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
623307 62370 CVE-2013-2423 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View
623308 62370 CVE-2013-2423 GENTOO:GLSA-201406-32  View
623309 62370 CVE-2013-2423 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
623310 62370 CVE-2013-2423 MANDRIVA:MDVSA-2013:161  View
623311 62370 CVE-2013-2423 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:161  View
623312 62370 CVE-2013-2423 REDHAT:RHSA-2013:0752  View
623313 62370 CVE-2013-2423 URL:http://rhn.redhat.com/errata/RHSA-2013-0752.html  View
623314 62370 CVE-2013-2423 REDHAT:RHSA-2013:0757  View
623315 62370 CVE-2013-2423 URL:http://rhn.redhat.com/errata/RHSA-2013-0757.html  View
623316 62370 CVE-2013-2423 SUSE:openSUSE-SU-2013:0964  View
623317 62370 CVE-2013-2423 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html  View
623318 62370 CVE-2013-2423 UBUNTU:USN-1806-1  View
623319 62370 CVE-2013-2423 URL:http://www.ubuntu.com/usn/USN-1806-1  View
623320 62370 CVE-2013-2423 CERT:TA13-107A  View
623321 62370 CVE-2013-2423 URL:http://www.us-cert.gov/ncas/alerts/TA13-107A  View
623322 62370 CVE-2013-2423 OVAL:oval:org.mitre.oval:def:16700  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20807 JVNDB-2013-002382 Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 Oracle Java SE および JavaFX の Java Runtime Environment (JRE) には、JavaFX に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-2428 62370 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002382.html  View