CVE-2013-1491
NoneCVSS
—
EPSS
16.4%
Published
Mar 8, 2013
CISA due date
—
The record
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:network_satellite:5.4::el5 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.4::el5 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.4::el6 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:network_satellite:5.4::el6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:network_satellite:5.5::el5 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.5::el5 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.5::el6 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:network_satellite:5.5::el6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm | 0 | 1:1.5.0.16.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-accessibility | 0 | 1:1.5.0.16.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-demo | 0 | 1:1.5.0.16.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-devel | 0 | 1:1.5.0.16.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.16.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.16.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.16.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-src | 0 | 1:1.5.0.16.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm | 0 | 1:1.6.0.13.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.13.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-demo | 0 | 1:1.6.0.13.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-devel | 0 | 1:1.6.0.13.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.13.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.13.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.13.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-src | 0 | 1:1.6.0.13.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun | 0 | 1:1.6.0.45-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-demo | 0 | 1:1.6.0.45-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-devel | 0 | 1:1.6.0.45-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.45-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-plugin | 0 | 1:1.6.0.45-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-src | 0 | 1:1.6.0.45-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm | 0 | 1:1.7.0.4.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-demo | 0 | 1:1.7.0.4.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-devel | 0 | 1:1.7.0.4.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-jdbc | 0 | 1:1.7.0.4.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-plugin | 0 | 1:1.7.0.4.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-ibm-src | 0 | 1:1.7.0.4.2-1jpp.1.el5_9 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle | 0 | 1:1.7.0.21-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-devel | 0 | 1:1.7.0.21-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-javafx | 0 | 1:1.7.0.21-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-jdbc | 0 | 1:1.7.0.21-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-plugin | 0 | 1:1.7.0.21-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.7.0-oracle-src | 0 | 1:1.7.0.21-1jpp.1.el5 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm | 0 | 1:1.5.0.16.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-demo | 0 | 1:1.5.0.16.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-devel | 0 | 1:1.5.0.16.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.16.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.16.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.16.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-src | 0 | 1:1.5.0.16.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm | 0 | 1:1.6.0.13.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-demo | 0 | 1:1.6.0.13.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.13.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.13.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.13.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.13.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-src | 0 | 1:1.6.0.13.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun | 0 | 1:1.6.0.45-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-demo | 0 | 1:1.6.0.45-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-devel | 0 | 1:1.6.0.45-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.45-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-plugin | 0 | 1:1.6.0.45-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-src | 0 | 1:1.6.0.45-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm | 0 | 1:1.7.0.4.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-demo | 0 | 1:1.7.0.4.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-devel | 0 | 1:1.7.0.4.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-jdbc | 0 | 1:1.7.0.4.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-plugin | 0 | 1:1.7.0.4.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-src | 0 | 1:1.7.0.4.2-1jpp.1.el6_4 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle | 0 | 1:1.7.0.21-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-devel | 0 | 1:1.7.0.21-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-javafx | 0 | 1:1.7.0.21-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-jdbc | 0 | 1:1.7.0.21-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-plugin | 0 | 1:1.7.0.21-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.7.0-oracle-src | 0 | 1:1.7.0.21-1jpp.1.el6 |
Related vulnerabilities
- CVE-2014-0429 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1… Also affects java-1.6.0-ibm
- CVE-2013-5842 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier… Also affects java-1.6.0-ibm
- CVE-2013-2471 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… Also affects java-1.6.0-ibm
- CVE-2013-2470 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… Also affects java-1.6.0-ibm
- CVE-2013-2472 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… Also affects java-1.6.0-ibm
- CVE-2013-2463 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… Also affects java-1.6.0-ibm
- CVE-2013-2465 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… Also affects java-1.6.0-ibm
- CVE-2013-1571 Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and… Also affects java-1.6.0-ibm