NVD

Id
36777  
Name
CVE-2013-0434  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAXP. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the public declaration of the loadPropertyFile method in the JAXP FuncSystemProperty class, which allows remote attackers to obtain sensitive information.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-02-01  
Modified Date
2014-10-04  
Seq
2013-0434  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
188094 36777 CVE-2013-0434 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907453  View
188095 36777 CVE-2013-0434 http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS  View
188096 36777 CVE-2013-0434 http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jaxp/rev/91fcc41a0b4b  View
188097 36777 CVE-2013-0434 openSUSE-SU-2013:0312  View
188098 36777 CVE-2013-0434 openSUSE-SU-2013:0377  View
188099 36777 CVE-2013-0434 SUSE-SU-2013:0478  View
188100 36777 CVE-2013-0434 HPSBUX02857  View
188101 36777 CVE-2013-0434 HPSBUX02864  View
188102 36777 CVE-2013-0434 HPSBMU02874  View
188103 36777 CVE-2013-0434 oval:org.mitre.oval:def:16528  View
188104 36777 CVE-2013-0434 oval:org.mitre.oval:def:19272  View
188105 36777 CVE-2013-0434 oval:org.mitre.oval:def:19430  View
188106 36777 CVE-2013-0434 oval:org.mitre.oval:def:19505  View
188107 36777 CVE-2013-0434 RHSA-2013:0236  View
188108 36777 CVE-2013-0434 RHSA-2013:0237  View
188109 36777 CVE-2013-0434 RHSA-2013:0245  View
188110 36777 CVE-2013-0434 RHSA-2013:0246  View
188111 36777 CVE-2013-0434 RHSA-2013:0247  View
188112 36777 CVE-2013-0434 RHSA-2013:1455  View
188113 36777 CVE-2013-0434 RHSA-2013:1456  View
188114 36777 CVE-2013-0434 GLSA-201406-32  View
188115 36777 CVE-2013-0434 VU#858729  View
188116 36777 CVE-2013-0434 MDVSA-2013:095  View
188117 36777 CVE-2013-0434 http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html  View
188118 36777 CVE-2013-0434 TA13-032A  View
188119 36777 CVE-2013-0434 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19826 JVNDB-2013-001401 Oracle Java SE の Java Runtime Environment における JAXP の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、JAXP に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。 CVE-2013-0434 60376 CVE-2013-0434 36777 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001401.html 2013-02-01 2015-03-18 View