NVD

Id
38483  
Name
CVE-2013-2420  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-04-17  
Modified Date
2014-10-04  
Seq
2013-2420  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
196614 38483 CVE-2013-2420 http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
196615 38483 CVE-2013-2420 http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
196616 38483 CVE-2013-2420 SSRT101305  View
196617 38483 CVE-2013-2420 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cf93d3828aa8  View
196618 38483 CVE-2013-2420 APPLE-SA-2013-04-16-2  View
196619 38483 CVE-2013-2420 SUSE-SU-2013:0814  View
196620 38483 CVE-2013-2420 SUSE-SU-2013:0835  View
196621 38483 CVE-2013-2420 SUSE-SU-2013:0871  View
196622 38483 CVE-2013-2420 SUSE-SU-2013:0934  View
196623 38483 CVE-2013-2420 openSUSE-SU-2013:0777  View
196624 38483 CVE-2013-2420 openSUSE-SU-2013:0964  View
196625 38483 CVE-2013-2420 [distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
196626 38483 CVE-2013-2420 SSRT101252  View
196627 38483 CVE-2013-2420 oval:org.mitre.oval:def:16597  View
196628 38483 CVE-2013-2420 oval:org.mitre.oval:def:19354  View
196629 38483 CVE-2013-2420 oval:org.mitre.oval:def:19704  View
196630 38483 CVE-2013-2420 RHSA-2013:0752  View
196631 38483 CVE-2013-2420 RHSA-2013:0757  View
196632 38483 CVE-2013-2420 RHSA-2013:0758  View
196633 38483 CVE-2013-2420 RHSA-2013:1455  View
196634 38483 CVE-2013-2420 RHSA-2013:1456  View
196635 38483 CVE-2013-2420 GLSA-201406-32  View
196636 38483 CVE-2013-2420 MDVSA-2013:145  View
196637 38483 CVE-2013-2420 MDVSA-2013:161  View
196638 38483 CVE-2013-2420 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
196639 38483 CVE-2013-2420 USN-1806-1  View
196640 38483 CVE-2013-2420 TA13-107A  View
196641 38483 CVE-2013-2420 https://bugzilla.redhat.com/show_bug.cgi?id=952638  View
196642 38483 CVE-2013-2420 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
196643 38483 CVE-2013-2420 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20819 JVNDB-2013-002394 Oracle Java SE の Java Runtime Environment における 2D の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) および OpenJDK には、2D に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-2420 62362 CVE-2013-2420 38483 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002394.html 2013-04-16 2015-03-18 View