NVD

Id
36746  
Name
CVE-2013-0402  
Description
Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via unspecified vectors related to JavaFX, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-08  
Modified Date
2013-11-02  
Seq
2013-0402  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187746 36746 CVE-2013-0402 http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157  View
187747 36746 CVE-2013-0402 oval:org.mitre.oval:def:15728  View
187748 36746 CVE-2013-0402 RHSA-2013:0757  View
187749 36746 CVE-2013-0402 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
187750 36746 CVE-2013-0402 TA13-107A  View
187751 36746 CVE-2013-0402 http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/  View
187752 36746 CVE-2013-0402 https://twitter.com/thezdi/status/309484730506698752  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20210 JVNDB-2013-001785 Oracle Java SE および JavaFX の Java Runtime Environment におけるヒープベースのバッファオーバーフローの脆弱性 Oracle Java SE および JavaFX の Java Runtime Environment (JRE) には、JavaFX に関する処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-0402 60344 CVE-2013-0402 36746 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001785.html 2013-03-08 2013-08-12 View