NVD

Id
38485  
Name
CVE-2013-2422  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-04-17  
Modified Date
2014-10-04  
Seq
2013-2422  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
196663 38485 CVE-2013-2422 http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
196664 38485 CVE-2013-2422 http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
196665 38485 CVE-2013-2422 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2899c3dbf5e8  View
196666 38485 CVE-2013-2422 APPLE-SA-2013-04-16-2  View
196667 38485 CVE-2013-2422 SUSE-SU-2013:0814  View
196668 38485 CVE-2013-2422 SUSE-SU-2013:0835  View
196669 38485 CVE-2013-2422 SUSE-SU-2013:0871  View
196670 38485 CVE-2013-2422 openSUSE-SU-2013:0777  View
196671 38485 CVE-2013-2422 openSUSE-SU-2013:0964  View
196672 38485 CVE-2013-2422 [distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
196673 38485 CVE-2013-2422 SSRT101252  View
196674 38485 CVE-2013-2422 oval:org.mitre.oval:def:16561  View
196675 38485 CVE-2013-2422 oval:org.mitre.oval:def:19087  View
196676 38485 CVE-2013-2422 RHSA-2013:0752  View
196677 38485 CVE-2013-2422 RHSA-2013:0757  View
196678 38485 CVE-2013-2422 RHSA-2013:0758  View
196679 38485 CVE-2013-2422 RHSA-2013:1455  View
196680 38485 CVE-2013-2422 RHSA-2013:1456  View
196681 38485 CVE-2013-2422 GLSA-201406-32  View
196682 38485 CVE-2013-2422 MDVSA-2013:145  View
196683 38485 CVE-2013-2422 MDVSA-2013:161  View
196684 38485 CVE-2013-2422 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
196685 38485 CVE-2013-2422 USN-1806-1  View
196686 38485 CVE-2013-2422 TA13-107A  View
196687 38485 CVE-2013-2422 https://bugzilla.redhat.com/show_bug.cgi?id=952642  View
196688 38485 CVE-2013-2422 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
196689 38485 CVE-2013-2422 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20805 JVNDB-2013-002380 Oracle Java SE の Java Runtime Environment における Libraries の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) および OpenJDK には、Libraries に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-2422 62364 CVE-2013-2422 38485 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002380.html 2013-04-16 2015-03-18 View