CVE

Id
62404  
CVE No.
CVE-2013-2457  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.  
Phase
Assigned (20130305)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
624409 62404 CVE-2013-2457 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ffef9e05564e  View
624410 62404 CVE-2013-2457 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html  View
624411 62404 CVE-2013-2457 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=975133  View
624412 62404 CVE-2013-2457 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21642336  View
624413 62404 CVE-2013-2457 CONFIRM:http://advisories.mageia.org/MGASA-2013-0185.html  View
624414 62404 CVE-2013-2457 GENTOO:GLSA-201406-32  View
624415 62404 CVE-2013-2457 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
624416 62404 CVE-2013-2457 HP:HPSBUX02922  View
624417 62404 CVE-2013-2457 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
624418 62404 CVE-2013-2457 HP:SSRT101305  View
624419 62404 CVE-2013-2457 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
624420 62404 CVE-2013-2457 HP:HPSBUX02907  View
624421 62404 CVE-2013-2457 URL:http://marc.info/?l=bugtraq&m=137545505800971&w=2  View
624422 62404 CVE-2013-2457 HP:HPSBUX02908  View
624423 62404 CVE-2013-2457 URL:http://marc.info/?l=bugtraq&m=137545592101387&w=2  View
624424 62404 CVE-2013-2457 MANDRIVA:MDVSA-2013:183  View
624425 62404 CVE-2013-2457 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:183  View
624426 62404 CVE-2013-2457 REDHAT:RHSA-2013:0963  View
624427 62404 CVE-2013-2457 URL:http://rhn.redhat.com/errata/RHSA-2013-0963.html  View
624428 62404 CVE-2013-2457 REDHAT:RHSA-2013:1081  View
624429 62404 CVE-2013-2457 URL:http://rhn.redhat.com/errata/RHSA-2013-1081.html  View
624430 62404 CVE-2013-2457 REDHAT:RHSA-2013:1060  View
624431 62404 CVE-2013-2457 URL:http://rhn.redhat.com/errata/RHSA-2013-1060.html  View
624432 62404 CVE-2013-2457 REDHAT:RHSA-2013:1455  View
624433 62404 CVE-2013-2457 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
624434 62404 CVE-2013-2457 REDHAT:RHSA-2013:1456  View
624435 62404 CVE-2013-2457 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
624436 62404 CVE-2013-2457 REDHAT:RHSA-2013:1059  View
624437 62404 CVE-2013-2457 URL:http://rhn.redhat.com/errata/RHSA-2013-1059.html  View
624438 62404 CVE-2013-2457 SUSE:SUSE-SU-2013:1305  View
624439 62404 CVE-2013-2457 URL:http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html  View
624440 62404 CVE-2013-2457 SUSE:SUSE-SU-2013:1293  View
624441 62404 CVE-2013-2457 URL:http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html  View
624442 62404 CVE-2013-2457 SUSE:SUSE-SU-2013:1255  View
624443 62404 CVE-2013-2457 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html  View
624444 62404 CVE-2013-2457 SUSE:SUSE-SU-2013:1256  View
624445 62404 CVE-2013-2457 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html  View
624446 62404 CVE-2013-2457 SUSE:SUSE-SU-2013:1257  View
624447 62404 CVE-2013-2457 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html  View
624448 62404 CVE-2013-2457 CERT:TA13-169A  View
624449 62404 CVE-2013-2457 URL:http://www.us-cert.gov/ncas/alerts/TA13-169A  View
624450 62404 CVE-2013-2457 OVAL:oval:org.mitre.oval:def:17256  View
624451 62404 CVE-2013-2457 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:17256  View
624452 62404 CVE-2013-2457 OVAL:oval:org.mitre.oval:def:19276  View
624453 62404 CVE-2013-2457 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19276  View
624454 62404 CVE-2013-2457 OVAL:oval:org.mitre.oval:def:19638  View
624455 62404 CVE-2013-2457 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19638  View
624456 62404 CVE-2013-2457 OVAL:oval:org.mitre.oval:def:19696  View
624457 62404 CVE-2013-2457 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19696  View
624458 62404 CVE-2013-2457 SECUNIA:54154  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21484 JVNDB-2013-003059 Oracle Java SE の Java Runtime Environment における Deployment に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、Deployment に関する処理に不備があるため、機密性、完全性、および可用性に影響のある脆弱性が存在します。 CVE-2013-2462 62404 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003059.html  View