CVE

Id
62420  
CVE No.
CVE-2013-2473  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.  
Phase
Assigned (20130305)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
625039 62420 CVE-2013-2473 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/259d4998ce2f  View
625040 62420 CVE-2013-2473 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html  View
625041 62420 CVE-2013-2473 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=975110  View
625042 62420 CVE-2013-2473 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21642336  View
625043 62420 CVE-2013-2473 CONFIRM:http://advisories.mageia.org/MGASA-2013-0185.html  View
625044 62420 CVE-2013-2473 GENTOO:GLSA-201406-32  View
625045 62420 CVE-2013-2473 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
625046 62420 CVE-2013-2473 HP:HPSBUX02922  View
625047 62420 CVE-2013-2473 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
625048 62420 CVE-2013-2473 HP:SSRT101305  View
625049 62420 CVE-2013-2473 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
625050 62420 CVE-2013-2473 HP:HPSBUX02907  View
625051 62420 CVE-2013-2473 URL:http://marc.info/?l=bugtraq&m=137545505800971&w=2  View
625052 62420 CVE-2013-2473 HP:HPSBUX02908  View
625053 62420 CVE-2013-2473 URL:http://marc.info/?l=bugtraq&m=137545592101387&w=2  View
625054 62420 CVE-2013-2473 MANDRIVA:MDVSA-2013:183  View
625055 62420 CVE-2013-2473 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:183  View
625056 62420 CVE-2013-2473 REDHAT:RHSA-2013:0963  View
625057 62420 CVE-2013-2473 URL:http://rhn.redhat.com/errata/RHSA-2013-0963.html  View
625058 62420 CVE-2013-2473 REDHAT:RHSA-2013:1081  View
625059 62420 CVE-2013-2473 URL:http://rhn.redhat.com/errata/RHSA-2013-1081.html  View
625060 62420 CVE-2013-2473 REDHAT:RHSA-2013:1060  View
625061 62420 CVE-2013-2473 URL:http://rhn.redhat.com/errata/RHSA-2013-1060.html  View
625062 62420 CVE-2013-2473 REDHAT:RHSA-2013:1455  View
625063 62420 CVE-2013-2473 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
625064 62420 CVE-2013-2473 REDHAT:RHSA-2013:1456  View
625065 62420 CVE-2013-2473 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
625066 62420 CVE-2013-2473 REDHAT:RHSA-2013:1059  View
625067 62420 CVE-2013-2473 URL:http://rhn.redhat.com/errata/RHSA-2013-1059.html  View
625068 62420 CVE-2013-2473 SUSE:SUSE-SU-2013:1305  View
625069 62420 CVE-2013-2473 URL:http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html  View
625070 62420 CVE-2013-2473 SUSE:SUSE-SU-2013:1293  View
625071 62420 CVE-2013-2473 URL:http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html  View
625072 62420 CVE-2013-2473 SUSE:SUSE-SU-2013:1255  View
625073 62420 CVE-2013-2473 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html  View
625074 62420 CVE-2013-2473 SUSE:SUSE-SU-2013:1256  View
625075 62420 CVE-2013-2473 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html  View
625076 62420 CVE-2013-2473 SUSE:SUSE-SU-2013:1257  View
625077 62420 CVE-2013-2473 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html  View
625078 62420 CVE-2013-2473 CERT:TA13-169A  View
625079 62420 CVE-2013-2473 URL:http://www.us-cert.gov/ncas/alerts/TA13-169A  View
625080 62420 CVE-2013-2473 BID:60623  View
625081 62420 CVE-2013-2473 URL:http://www.securityfocus.com/bid/60623  View
625082 62420 CVE-2013-2473 OVAL:oval:org.mitre.oval:def:17189  View
625083 62420 CVE-2013-2473 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:17189  View
625084 62420 CVE-2013-2473 OVAL:oval:org.mitre.oval:def:18888  View
625085 62420 CVE-2013-2473 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:18888  View
625086 62420 CVE-2013-2473 OVAL:oval:org.mitre.oval:def:19600  View
625087 62420 CVE-2013-2473 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19600  View
625088 62420 CVE-2013-2473 OVAL:oval:org.mitre.oval:def:19652  View
625089 62420 CVE-2013-2473 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19652  View
625090 62420 CVE-2013-2473 SECUNIA:54154  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20190 JVNDB-2013-001765 Wireshark の MS-MMS 解析機能におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 Wireshark の MS-MMS 解析機能の epan/dissectors/packet-ms-mms.c 内の dissect_server_info 関数は、文字列の長さを適切に管理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2013-2478 62420 3.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001765.html  View