Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-693

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://advisories.mageia.org/MGASA-2013-0185.htmlBroken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880Broken Link
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040Patch
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.htmlMailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=137545505800971&w=2Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=137545592101387&w=2Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0963.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1059.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1060.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1081.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1455.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1456.htmlThird Party Advisory
http://secunia.com/advisories/54154Not Applicable
http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21642336Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:183Not Applicable
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.htmlVendor Advisory
http://www.securityfocus.com/bid/60657Broken Link, Third Party Advisory, VDB Entry
http://www.us-cert.gov/ncas/alerts/TA13-169AThird Party Advisory, US Government Resource
https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=975118Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703Broken Link
http://advisories.mageia.org/MGASA-2013-0185.htmlBroken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880Broken Link
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040Patch
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.htmlMailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=137545505800971&w=2Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=137545592101387&w=2Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0963.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1059.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1060.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1081.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1455.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1456.htmlThird Party Advisory
http://secunia.com/advisories/54154Not Applicable
http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21642336Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:183Not Applicable
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.htmlVendor Advisory
http://www.securityfocus.com/bid/60657Broken Link, Third Party Advisory, VDB Entry
http://www.us-cert.gov/ncas/alerts/TA13-169AThird Party Advisory, US Government Resource
https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=975118Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074Broken Link

Timeline

Published: Jun 18, 2013
Last modified: Jun 16, 2026
Added to CISA KEV: Mar 28, 2022
NVD status: Analyzed

CVE-2013-2465