CVE-2013-0444 — Oracle JDK vulnerability

5 documents5 sources
Severity
7.6HIGHNVD
EPSS
8.0%
top 7.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle JDKOracle JRE
Timeline
PublishedFeb 2
Latest updateMay 5

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient checks for cached results" by the Java Beans MethodFinder, which might allow attackers to acce…

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 4.9 | Impact: 10.0

Affected Packages2 packages

▶NVDoracle/jdk1.7.0
▶NVDoracle/jre1.7.0

🔴Vulnerability Details

1
GHSA
GHSA-px4h-jjhx-vcmc: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attacker↗2022-05-05
▶

📋Vendor Advisories

2
Ubuntu
OpenJDK vulnerabilities↗2013-02-14
▶
Red Hat
OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493)↗2013-02-01
▶

💬Community

1
Bugzilla
CVE-2013-0444 OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493)↗2013-02-03
▶
CVE-2013-0444 — Oracle JDK vulnerability | cvebase