CVE

Id
62395  
CVE No.
CVE-2013-2448  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."  
Phase
Assigned (20130305)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
624019 62395 CVE-2013-2448 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/91ce9432f88d  View
624020 62395 CVE-2013-2448 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html  View
624021 62395 CVE-2013-2448 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=975125  View
624022 62395 CVE-2013-2448 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21642336  View
624023 62395 CVE-2013-2448 CONFIRM:http://advisories.mageia.org/MGASA-2013-0185.html  View
624024 62395 CVE-2013-2448 GENTOO:GLSA-201406-32  View
624025 62395 CVE-2013-2448 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
624026 62395 CVE-2013-2448 HP:HPSBUX02922  View
624027 62395 CVE-2013-2448 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
624028 62395 CVE-2013-2448 HP:SSRT101305  View
624029 62395 CVE-2013-2448 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
624030 62395 CVE-2013-2448 HP:HPSBUX02907  View
624031 62395 CVE-2013-2448 URL:http://marc.info/?l=bugtraq&m=137545505800971&w=2  View
624032 62395 CVE-2013-2448 HP:HPSBUX02908  View
624033 62395 CVE-2013-2448 URL:http://marc.info/?l=bugtraq&m=137545592101387&w=2  View
624034 62395 CVE-2013-2448 MANDRIVA:MDVSA-2013:183  View
624035 62395 CVE-2013-2448 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:183  View
624036 62395 CVE-2013-2448 REDHAT:RHSA-2013:0963  View
624037 62395 CVE-2013-2448 URL:http://rhn.redhat.com/errata/RHSA-2013-0963.html  View
624038 62395 CVE-2013-2448 REDHAT:RHSA-2013:1081  View
624039 62395 CVE-2013-2448 URL:http://rhn.redhat.com/errata/RHSA-2013-1081.html  View
624040 62395 CVE-2013-2448 REDHAT:RHSA-2013:1060  View
624041 62395 CVE-2013-2448 URL:http://rhn.redhat.com/errata/RHSA-2013-1060.html  View
624042 62395 CVE-2013-2448 REDHAT:RHSA-2013:1455  View
624043 62395 CVE-2013-2448 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
624044 62395 CVE-2013-2448 REDHAT:RHSA-2013:1456  View
624045 62395 CVE-2013-2448 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
624046 62395 CVE-2013-2448 REDHAT:RHSA-2013:1059  View
624047 62395 CVE-2013-2448 URL:http://rhn.redhat.com/errata/RHSA-2013-1059.html  View
624048 62395 CVE-2013-2448 SUSE:SUSE-SU-2013:1305  View
624049 62395 CVE-2013-2448 URL:http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html  View
624050 62395 CVE-2013-2448 SUSE:SUSE-SU-2013:1293  View
624051 62395 CVE-2013-2448 URL:http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html  View
624052 62395 CVE-2013-2448 SUSE:SUSE-SU-2013:1255  View
624053 62395 CVE-2013-2448 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html  View
624054 62395 CVE-2013-2448 SUSE:SUSE-SU-2013:1256  View
624055 62395 CVE-2013-2448 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html  View
624056 62395 CVE-2013-2448 SUSE:SUSE-SU-2013:1257  View
624057 62395 CVE-2013-2448 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html  View
624058 62395 CVE-2013-2448 CERT:TA13-169A  View
624059 62395 CVE-2013-2448 URL:http://www.us-cert.gov/ncas/alerts/TA13-169A  View
624060 62395 CVE-2013-2448 OVAL:oval:org.mitre.oval:def:17052  View
624061 62395 CVE-2013-2448 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:17052  View
624062 62395 CVE-2013-2448 OVAL:oval:org.mitre.oval:def:19632  View
624063 62395 CVE-2013-2448 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19632  View
624064 62395 CVE-2013-2448 OVAL:oval:org.mitre.oval:def:19669  View
624065 62395 CVE-2013-2448 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19669  View
624066 62395 CVE-2013-2448 OVAL:oval:org.mitre.oval:def:19692  View
624067 62395 CVE-2013-2448 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19692  View
624068 62395 CVE-2013-2448 SECUNIA:54154  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21475 JVNDB-2013-003050 Oracle Java SE の Java Runtime Environment における JMX に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、JMX に関する処理に不備があるため、完全性に影響のある脆弱性が存在します。 CVE-2013-2453 62395 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003050.html  View