NVD

Id
37683  
Name
CVE-2013-1491  
Description
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-08  
Modified Date
2013-12-05  
Seq
2013-1491  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191817 37683 CVE-2013-1491 SSRT101305  View
191818 37683 CVE-2013-1491 http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157  View
191819 37683 CVE-2013-1491 APPLE-SA-2013-04-16-2  View
191820 37683 CVE-2013-1491 SUSE-SU-2013:0835  View
191821 37683 CVE-2013-1491 SUSE-SU-2013:0871  View
191822 37683 CVE-2013-1491 SUSE-SU-2013:0934  View
191823 37683 CVE-2013-1491 SSRT101252  View
191824 37683 CVE-2013-1491 oval:org.mitre.oval:def:16663  View
191825 37683 CVE-2013-1491 oval:org.mitre.oval:def:19482  View
191826 37683 CVE-2013-1491 oval:org.mitre.oval:def:19553  View
191827 37683 CVE-2013-1491 RHSA-2013:0757  View
191828 37683 CVE-2013-1491 RHSA-2013:0758  View
191829 37683 CVE-2013-1491 RHSA-2013:1455  View
191830 37683 CVE-2013-1491 RHSA-2013:1456  View
191831 37683 CVE-2013-1491 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
191832 37683 CVE-2013-1491 TA13-107A  View
191833 37683 CVE-2013-1491 http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/  View
191834 37683 CVE-2013-1491 https://twitter.com/thezdi/status/309438311112507392  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20212 JVNDB-2013-001787 Oracle Java SE および JavaFX の Java Runtime Environment における任意のコードを実行される脆弱性 Oracle Java SE および JavaFX の Java Runtime Environment (JRE) には、2D に関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2013-1491 61433 CVE-2013-1491 37683 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001787.html 2013-03-08 2015-03-18 View