جزئیات آسیب‌پذیری

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.

• https://www.vicarius.io/vsociety/posts/cve-2013-2465-detect-java-vulnerability
• https://www.vicarius.io/vsociety/posts/cve-2013-2465-mitigate-java-vulnerability
• http://rhn.redhat.com/errata/RHSA-2013-1060.html vendor-advisoryx_refsource_REDHAT
• http://marc.info/?l=bugtraq&m=137545592101387&w=2 vendor-advisoryx_refsource_HP
• https://access.redhat.com/errata/RHSA-2014:0414 vendor-advisoryx_refsource_REDHAT
• http://security.gentoo.org/glsa/glsa-201406-32.xml vendor-advisoryx_refsource_GENTOO
• http://www.securityfocus.com/bid/60657 vdb-entryx_refsource_BID
• http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html x_refsource_CONFIRM
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html vendor-advisoryx_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html vendor-advisoryx_refsource_SUSE
• http://marc.info/?l=bugtraq&m=137545505800971&w=2 vendor-advisoryx_refsource_HP
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html vendor-advisoryx_refsource_SUSE
• http://secunia.com/advisories/54154 third-party-advisoryx_refsource_SECUNIA
• http://rhn.redhat.com/errata/RHSA-2013-1455.html vendor-advisoryx_refsource_REDHAT
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455 vdb-entrysignaturex_refsource_OVAL
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703 vdb-entrysignaturex_refsource_OVAL
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 vendor-advisoryx_refsource_HP
• http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040 x_refsource_MISC
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074 vdb-entrysignaturex_refsource_OVAL
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html vendor-advisoryx_refsource_SUSE
• http://rhn.redhat.com/errata/RHSA-2013-1059.html vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html vendor-advisoryx_refsource_SUSE
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106 vdb-entrysignaturex_refsource_OVAL
• http://rhn.redhat.com/errata/RHSA-2013-1081.html vendor-advisoryx_refsource_REDHAT
• http://www.us-cert.gov/ncas/alerts/TA13-169A third-party-advisoryx_refsource_CERT
• http://advisories.mageia.org/MGASA-2013-0185.html x_refsource_CONFIRM
• http://rhn.redhat.com/errata/RHSA-2013-0963.html vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html vendor-advisoryx_refsource_SUSE
• https://bugzilla.redhat.com/show_bug.cgi?id=975118 x_refsource_CONFIRM
• http://rhn.redhat.com/errata/RHSA-2013-1456.html vendor-advisoryx_refsource_REDHAT
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:183 vendor-advisoryx_refsource_MANDRIVA
• http://www-01.ibm.com/support/docview.wss?uid=swg21642336 x_refsource_CONFIRM
• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html vendor-advisoryx_refsource_SUSE
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2465 government-resource