cvelistv5 - cve-2013-2415

CVE-2013-2415 (GCVE-0-2013-2415)

Vulnerability from cvelistv5

Published

2013-04-17 15:00

Modified

2024-08-06 15:36

Severity ?

CWE

Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "processing of MTOM attachments" and the creation of temporary files with weak permissions.

References

URL

Tags

	http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor-advisory, x_refsource_GENTOO
	http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html	mailing-list, x_refsource_MLIST
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:145	vendor-advisory, x_refsource_MANDRIVA
	http://www.us-cert.gov/ncas/alerts/TA13-107A	third-party-advisory, x_refsource_CERT
	http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/	x_refsource_CONFIRM
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130	x_refsource_CONFIRM
	http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxws/rev/e07c518282ba	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-0757.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16011	vdb-entry, signature, x_refsource_OVAL
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:161	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.redhat.com/show_bug.cgi?id=952389	x_refsource_MISC
	http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0752.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1806-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	vendor-advisory, x_refsource_MANDRIVA
	http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html	x_refsource_CONFIRM
	http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:36:46.437Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201406-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
          },
          {
            "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
          },
          {
            "name": "MDVSA-2013:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
          },
          {
            "name": "TA13-107A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxws/rev/e07c518282ba"
          },
          {
            "name": "RHSA-2013:0757",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16011",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16011"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
          },
          {
            "name": "openSUSE-SU-2013:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
          },
          {
            "name": "MDVSA-2013:161",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952389"
          },
          {
            "name": "openSUSE-SU-2013:0964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
          },
          {
            "name": "RHSA-2013:0752",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
          },
          {
            "name": "USN-1806-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1806-1"
          },
          {
            "name": "SUSE-SU-2013:0814",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
          },
          {
            "name": "MDVSA-2013:150",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"processing of MTOM attachments\" and the creation of temporary files with weak permissions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "GLSA-201406-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
        },
        {
          "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
        },
        {
          "name": "MDVSA-2013:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
        },
        {
          "name": "TA13-107A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxws/rev/e07c518282ba"
        },
        {
          "name": "RHSA-2013:0757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16011",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16011"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
        },
        {
          "name": "openSUSE-SU-2013:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
        },
        {
          "name": "MDVSA-2013:161",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952389"
        },
        {
          "name": "openSUSE-SU-2013:0964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
        },
        {
          "name": "RHSA-2013:0752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
        },
        {
          "name": "USN-1806-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1806-1"
        },
        {
          "name": "SUSE-SU-2013:0814",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
        },
        {
          "name": "MDVSA-2013:150",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2013-2415",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"processing of MTOM attachments\" and the creation of temporary files with weak permissions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201406-32",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
            },
            {
              "name": "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!",
              "refsource": "MLIST",
              "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html"
            },
            {
              "name": "MDVSA-2013:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145"
            },
            {
              "name": "TA13-107A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/ncas/alerts/TA13-107A"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130"
            },
            {
              "name": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxws/rev/e07c518282ba",
              "refsource": "MISC",
              "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxws/rev/e07c518282ba"
            },
            {
              "name": "RHSA-2013:0757",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0757.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16011",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16011"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124"
            },
            {
              "name": "openSUSE-SU-2013:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html"
            },
            {
              "name": "MDVSA-2013:161",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=952389",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=952389"
            },
            {
              "name": "openSUSE-SU-2013:0964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html"
            },
            {
              "name": "RHSA-2013:0752",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0752.html"
            },
            {
              "name": "USN-1806-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1806-1"
            },
            {
              "name": "SUSE-SU-2013:0814",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html"
            },
            {
              "name": "MDVSA-2013:150",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
            },
            {
              "name": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/",
              "refsource": "CONFIRM",
              "url": "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2013-2415",
    "datePublished": "2013-04-17T15:00:00.000Z",
    "dateReserved": "2013-03-05T00:00:00.000Z",
    "dateUpdated": "2024-08-06T15:36:46.437Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2013-AVI-256

Vulnerability from certfr_avis

De multiples vulnérabilités ont été corrigées dans Oracle Java. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Oracle	N/A	Oracle Java versions 1.6.43 et antérieures
Oracle	N/A	Oracle Java versions 1.7.17 et antérieures
Oracle	N/A	Oracle JavaFX versions 2.2.7 et antérieures
Oracle	N/A	Oracle Java versions 1.5.41 et antérieures

References

Title

Publication Time

Tags

Bulletin de sécurité Oracle JavaCPUApr2013 du 16 avril 2013

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Java versions 1.6.43 et ant\u00e9rieures",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Java versions 1.7.17 et ant\u00e9rieures",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle JavaFX versions 2.2.7 et ant\u00e9rieures",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Java versions 1.5.41 et ant\u00e9rieures",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-2423",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2423"
    },
    {
      "name": "CVE-2013-1563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1563"
    },
    {
      "name": "CVE-2013-2420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2420"
    },
    {
      "name": "CVE-2013-1518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1518"
    },
    {
      "name": "CVE-2013-2427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2427"
    },
    {
      "name": "CVE-2013-1557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1557"
    },
    {
      "name": "CVE-2013-2419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2419"
    },
    {
      "name": "CVE-2013-2435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2435"
    },
    {
      "name": "CVE-2013-1561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1561"
    },
    {
      "name": "CVE-2013-2440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2440"
    },
    {
      "name": "CVE-2013-2415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2415"
    },
    {
      "name": "CVE-2013-2429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2429"
    },
    {
      "name": "CVE-2013-0401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0401"
    },
    {
      "name": "CVE-2013-2418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2418"
    },
    {
      "name": "CVE-2013-2416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2416"
    },
    {
      "name": "CVE-2013-2425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2425"
    },
    {
      "name": "CVE-2013-2431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2431"
    },
    {
      "name": "CVE-2013-1564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1564"
    },
    {
      "name": "CVE-2013-2430",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2430"
    },
    {
      "name": "CVE-2013-2438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2438"
    },
    {
      "name": "CVE-2013-1488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1488"
    },
    {
      "name": "CVE-2013-2421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2421"
    },
    {
      "name": "CVE-2013-2432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2432"
    },
    {
      "name": "CVE-2013-2439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2439"
    },
    {
      "name": "CVE-2013-2422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2422"
    },
    {
      "name": "CVE-2013-2384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2384"
    },
    {
      "name": "CVE-2013-2383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2383"
    },
    {
      "name": "CVE-2013-2424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2424"
    },
    {
      "name": "CVE-2013-2414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2414"
    },
    {
      "name": "CVE-2013-2426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2426"
    },
    {
      "name": "CVE-2013-1558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1558"
    },
    {
      "name": "CVE-2013-2417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2417"
    },
    {
      "name": "CVE-2013-0402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0402"
    },
    {
      "name": "CVE-2013-1569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1569"
    },
    {
      "name": "CVE-2013-2428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2428"
    },
    {
      "name": "CVE-2013-2434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2434"
    },
    {
      "name": "CVE-2013-1540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1540"
    },
    {
      "name": "CVE-2013-2433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2433"
    },
    {
      "name": "CVE-2013-2394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2394"
    },
    {
      "name": "CVE-2013-1491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1491"
    },
    {
      "name": "CVE-2013-1537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1537"
    },
    {
      "name": "CVE-2013-2436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2436"
    }
  ],
  "initial_release_date": "2013-04-17T00:00:00",
  "last_revision_date": "2013-04-17T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-256",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-04-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Java\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle JavaCPUApr2013 du 16 avril 2013",
      "url": "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2013-2415 (GCVE-0-2013-2415)

Vulnerability from cvelistv5

CERTA-2013-AVI-256

Vulnerability from certfr_avis

Solution

Tags

Sightings

Nomenclature