NVD

Id
37682  
Name
CVE-2013-1490  
Description
Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431. NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors. NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-01-31  
Modified Date
2013-02-04  
Seq
2013-1490  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191811 37682 CVE-2013-1490 http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/  View
191812 37682 CVE-2013-1490 http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53  View
191813 37682 CVE-2013-1490 20130118 [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable  View
191814 37682 CVE-2013-1490 20130122 Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable  View
191815 37682 CVE-2013-1490 http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717  View
191816 37682 CVE-2013-1490 20130122 Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19772 JVNDB-2013-001347 Oracle Java SE 7 Update 11 における Java セキュリティサンドボックスを回避される脆弱性 Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) には、Java セキュリティサンドボックスを回避される脆弱性が存在します。 CVE-2013-1490 61432 CVE-2013-1490 37682 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001347.html 2013-01-31 2013-02-04 View