CVE

Id
62371  
CVE No.
CVE-2013-2424  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator.  
Phase
Assigned (20130305)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
623323 62371 CVE-2013-2424 MLIST:[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
623324 62371 CVE-2013-2424 URL:http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html  View
623325 62371 CVE-2013-2424 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/da1867780fc9  View
623326 62371 CVE-2013-2424 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=952509  View
623327 62371 CVE-2013-2424 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
623328 62371 CVE-2013-2424 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
623329 62371 CVE-2013-2424 CONFIRM:http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
623330 62371 CVE-2013-2424 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
623331 62371 CVE-2013-2424 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View
623332 62371 CVE-2013-2424 APPLE:APPLE-SA-2013-04-16-2  View
623333 62371 CVE-2013-2424 URL:http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html  View
623334 62371 CVE-2013-2424 GENTOO:GLSA-201406-32  View
623335 62371 CVE-2013-2424 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
623336 62371 CVE-2013-2424 HP:HPSBUX02889  View
623337 62371 CVE-2013-2424 URL:http://marc.info/?l=bugtraq&m=137283787217316&w=2  View
623338 62371 CVE-2013-2424 HP:SSRT101252  View
623339 62371 CVE-2013-2424 URL:http://marc.info/?l=bugtraq&m=137283787217316&w=2  View
623340 62371 CVE-2013-2424 HP:HPSBUX02922  View
623341 62371 CVE-2013-2424 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
623342 62371 CVE-2013-2424 HP:SSRT101305  View
623343 62371 CVE-2013-2424 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
623344 62371 CVE-2013-2424 MANDRIVA:MDVSA-2013:145  View
623345 62371 CVE-2013-2424 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:145  View
623346 62371 CVE-2013-2424 MANDRIVA:MDVSA-2013:161  View
623347 62371 CVE-2013-2424 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:161  View
623348 62371 CVE-2013-2424 REDHAT:RHSA-2013:0752  View
623349 62371 CVE-2013-2424 URL:http://rhn.redhat.com/errata/RHSA-2013-0752.html  View
623350 62371 CVE-2013-2424 REDHAT:RHSA-2013:0757  View
623351 62371 CVE-2013-2424 URL:http://rhn.redhat.com/errata/RHSA-2013-0757.html  View
623352 62371 CVE-2013-2424 REDHAT:RHSA-2013:0758  View
623353 62371 CVE-2013-2424 URL:http://rhn.redhat.com/errata/RHSA-2013-0758.html  View
623354 62371 CVE-2013-2424 REDHAT:RHSA-2013:1455  View
623355 62371 CVE-2013-2424 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
623356 62371 CVE-2013-2424 REDHAT:RHSA-2013:1456  View
623357 62371 CVE-2013-2424 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
623358 62371 CVE-2013-2424 SUSE:SUSE-SU-2013:0814  View
623359 62371 CVE-2013-2424 URL:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html  View
623360 62371 CVE-2013-2424 SUSE:openSUSE-SU-2013:0777  View
623361 62371 CVE-2013-2424 URL:http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html  View
623362 62371 CVE-2013-2424 SUSE:SUSE-SU-2013:0835  View
623363 62371 CVE-2013-2424 URL:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html  View
623364 62371 CVE-2013-2424 SUSE:SUSE-SU-2013:0871  View
623365 62371 CVE-2013-2424 URL:http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html  View
623366 62371 CVE-2013-2424 SUSE:openSUSE-SU-2013:0964  View
623367 62371 CVE-2013-2424 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html  View
623368 62371 CVE-2013-2424 UBUNTU:USN-1806-1  View
623369 62371 CVE-2013-2424 URL:http://www.ubuntu.com/usn/USN-1806-1  View
623370 62371 CVE-2013-2424 CERT:TA13-107A  View
623371 62371 CVE-2013-2424 URL:http://www.us-cert.gov/ncas/alerts/TA13-107A  View
623372 62371 CVE-2013-2424 BID:59159  View
623373 62371 CVE-2013-2424 URL:http://www.securityfocus.com/bid/59159  View
623374 62371 CVE-2013-2424 OVAL:oval:org.mitre.oval:def:16314  View
623375 62371 CVE-2013-2424 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16314  View
623376 62371 CVE-2013-2424 OVAL:oval:org.mitre.oval:def:19594  View
623377 62371 CVE-2013-2424 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19594  View
623378 62371 CVE-2013-2424 OVAL:oval:org.mitre.oval:def:19656  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20823 JVNDB-2013-002398 Oracle Java SE の Java Runtime Environment における ImageIO の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) および OpenJDK には、ImageIO に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-2429 62371 7.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002398.html  View