NVD

Id
37685  
Name
CVE-2013-1493  
Description
The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-05  
Modified Date
2015-07-29  
Seq
2013-1493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191839 37685 CVE-2013-1493 http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html  View
191840 37685 CVE-2013-1493 HPSBMU02964  View
191841 37685 CVE-2013-1493 openSUSE-SU-2013:0430  View
191842 37685 CVE-2013-1493 SUSE-SU-2013:0434  View
191843 37685 CVE-2013-1493 openSUSE-SU-2013:0438  View
191844 37685 CVE-2013-1493 SUSE-SU-2013:0701  View
191845 37685 CVE-2013-1493 [distro-pkg-dev] 20130304 [SECURITY] IcedTea6 1.11.9 and 1.12.4 Released!  View
191846 37685 CVE-2013-1493 HPSBUX02857  View
191847 37685 CVE-2013-1493 HPSBUX02864  View
191848 37685 CVE-2013-1493 oval:org.mitre.oval:def:19246  View
191849 37685 CVE-2013-1493 oval:org.mitre.oval:def:19477  View
191850 37685 CVE-2013-1493 RHSA-2013:0601  View
191851 37685 CVE-2013-1493 RHSA-2013:0603  View
191852 37685 CVE-2013-1493 RHSA-2013:0604  View
191853 37685 CVE-2013-1493 RHSA-2013:1455  View
191854 37685 CVE-2013-1493 RHSA-2013:1456  View
191855 37685 CVE-2013-1493 GLSA-201406-32  View
191856 37685 CVE-2013-1493 24904  View
191857 37685 CVE-2013-1493 VU#688246  View
191858 37685 CVE-2013-1493 MDVSA-2013:095  View
191859 37685 CVE-2013-1493 http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/1915099.xml  View
191860 37685 CVE-2013-1493 http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html  View
191861 37685 CVE-2013-1493 1029803  View
191862 37685 CVE-2013-1493 http://www.symantec.com/connect/blogs/latest-java-zero-day-shares-connections-bit9-security-incident  View
191863 37685 CVE-2013-1493 USN-1755-2  View
191864 37685 CVE-2013-1493 TA13-064A  View
191865 37685 CVE-2013-1493 https://bugzilla.redhat.com/show_bug.cgi?id=917553  View
191866 37685 CVE-2013-1493 https://krebsonsecurity.com/2013/03/new-java-0-day-attack-echoes-bit9-breach/  View
191867 37685 CVE-2013-1493 https://twitter.com/jduck1337/status/307629902574800897  View
191868 37685 CVE-2013-1493 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0088  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20173 JVNDB-2013-001748 Oracle Java SE の Java Runtime Environment の 2D における任意のコードを実行される脆弱性 Oracle Java SE の Java Runtime Environment の 2D における色の管理 (CMM) 機能には、任意のコードを実行される、またはサービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2013-1493 61435 CVE-2013-1493 37685 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001748.html 2013-03-04 2015-03-18 View