NVD

Id
36745  
Name
CVE-2013-0401  
Description
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-08  
Modified Date
2014-10-04  
Seq
2013-0401  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187715 36745 CVE-2013-0401 http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
187716 36745 CVE-2013-0401 http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
187717 36745 CVE-2013-0401 SSRT101305  View
187718 36745 CVE-2013-0401 http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157  View
187719 36745 CVE-2013-0401 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044  View
187720 36745 CVE-2013-0401 SUSE-SU-2013:0814  View
187721 36745 CVE-2013-0401 SUSE-SU-2013:0835  View
187722 36745 CVE-2013-0401 SUSE-SU-2013:0871  View
187723 36745 CVE-2013-0401 openSUSE-SU-2013:0777  View
187724 36745 CVE-2013-0401 openSUSE-SU-2013:0964  View
187725 36745 CVE-2013-0401 [distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
187726 36745 CVE-2013-0401 SSRT101252  View
187727 36745 CVE-2013-0401 oval:org.mitre.oval:def:16297  View
187728 36745 CVE-2013-0401 oval:org.mitre.oval:def:19463  View
187729 36745 CVE-2013-0401 oval:org.mitre.oval:def:19641  View
187730 36745 CVE-2013-0401 RHSA-2013:0752  View
187731 36745 CVE-2013-0401 RHSA-2013:0757  View
187732 36745 CVE-2013-0401 RHSA-2013:0758  View
187733 36745 CVE-2013-0401 RHSA-2013:1455  View
187734 36745 CVE-2013-0401 RHSA-2013:1456  View
187735 36745 CVE-2013-0401 GLSA-201406-32  View
187736 36745 CVE-2013-0401 MDVSA-2013:145  View
187737 36745 CVE-2013-0401 MDVSA-2013:161  View
187738 36745 CVE-2013-0401 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
187739 36745 CVE-2013-0401 USN-1806-1  View
187740 36745 CVE-2013-0401 TA13-107A  View
187741 36745 CVE-2013-0401 http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/  View
187742 36745 CVE-2013-0401 https://bugzilla.redhat.com/show_bug.cgi?id=920245  View
187743 36745 CVE-2013-0401 https://twitter.com/thezdi/status/309784608508100608  View
187744 36745 CVE-2013-0401 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
187745 36745 CVE-2013-0401 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20209 JVNDB-2013-001784 Oracle Java SE の Java Runtime Environment における任意のコードを実行される脆弱性 Oracle Java SE の Java Runtime Environment (JRE) および OpenJDK には、AWT に関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2013-0401 60343 CVE-2013-0401 36745 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001784.html 2013-03-08 2015-03-18 View