NVD

Id
36765  
Name
CVE-2013-0422  
Description
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-01-10  
Modified Date
2014-02-20  
Seq
2013-0422  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187833 36765 CVE-2013-0422 http://blog.fireeye.com/research/2013/01/happy-new-year-from-new-java-zero-day.html  View
187834 36765 CVE-2013-0422 http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/  View
187835 36765 CVE-2013-0422 http://immunityproducts.blogspot.ca/2013/01/confirmed-java-only-fixed-one-of-two.html  View
187836 36765 CVE-2013-0422 http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/  View
187837 36765 CVE-2013-0422 http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/  View
187838 36765 CVE-2013-0422 openSUSE-SU-2013:0199  View
187839 36765 CVE-2013-0422 http://malware.dontneedcoffee.com/2013/01/0-day-17u10-spotted-in-while-disable.html  View
187840 36765 CVE-2013-0422 RHSA-2013:0156  View
187841 36765 CVE-2013-0422 RHSA-2013:0165  View
187842 36765 CVE-2013-0422 20130110 [SE-2012-01] "Fix" for Issue 32 exploited by new Java 0-day code  View
187843 36765 CVE-2013-0422 VU#625617  View
187844 36765 CVE-2013-0422 MDVSA-2013:095  View
187845 36765 CVE-2013-0422 http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html  View
187846 36765 CVE-2013-0422 USN-1693-1  View
187847 36765 CVE-2013-0422 TA13-010A  View
187848 36765 CVE-2013-0422 https://partners.immunityinc.com/idocs/Java%20MBeanInstantiator.findClass%200day%20Analysis.pdf  View
187849 36765 CVE-2013-0422 https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013  View
187850 36765 CVE-2013-0422 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0018  View
187851 36765 CVE-2013-0422 https://www-304.ibm.com/connections/blogs/PSIRT/entry/oracle_java_7_security_manager_bypass_vulnerability_cve_2013_04224?lang=en_us  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19453 JVNDB-2013-001027 Oracle Java 7 に脆弱性 Oracle が提供する Java 7 には、任意のコードが実行可能な脆弱性が存在します。 CVE-2013-0422 60364 CVE-2013-0422 36765 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001027.html 2013-01-11 2014-08-25 View