NVD

Id
36787  
Name
CVE-2013-0444  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient checks for cached results" by the Java Beans MethodFinder, which might allow attackers to access methods that should only be accessible to privileged code.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-02-01  
Modified Date
2014-10-04  
Seq
2013-0444  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
188280 36787 CVE-2013-0444 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907218  View
188281 36787 CVE-2013-0444 http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce04db4aba39  View
188282 36787 CVE-2013-0444 openSUSE-SU-2013:0377  View
188283 36787 CVE-2013-0444 HPSBUX02857  View
188284 36787 CVE-2013-0444 HPSBMU02874  View
188285 36787 CVE-2013-0444 oval:org.mitre.oval:def:16614  View
188286 36787 CVE-2013-0444 oval:org.mitre.oval:def:19349  View
188287 36787 CVE-2013-0444 RHSA-2013:0237  View
188288 36787 CVE-2013-0444 RHSA-2013:0247  View
188289 36787 CVE-2013-0444 GLSA-201406-32  View
188290 36787 CVE-2013-0444 VU#858729  View
188291 36787 CVE-2013-0444 MDVSA-2013:095  View
188292 36787 CVE-2013-0444 http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html  View
188293 36787 CVE-2013-0444 TA13-032A  View
188294 36787 CVE-2013-0444 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19804 JVNDB-2013-001379 Oracle Java SE の Java Runtime Environment における Beans の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、Beans に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-0444 60386 CVE-2013-0444 36787 7.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001379.html 2013-02-01 2014-03-31 View