CVE-2013-2432

published 2013-04-17

CVE-2013-2432: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.

Affected

25 ranges

Vendor	Product	Version range	Fixed in
oracle	javafx	<= 2.2.7	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	jdk	<= 1.7.0	—
oracle	jdk	<= 1.6.0	—
oracle	jdk	<= 1.5.0	—
oracle	jdk	—	—
oracle	jdk	—	—
oracle	jdk	—	—
oracle	jre	<= 1.7.0	—
oracle	jre	<= 1.6.0	—
oracle	jre	<= 1.5.0	—
oracle	jre	—	—
oracle	jre	—	—
oracle	jre	—	—
sun	jdk	—	—
sun	jdk	—	—
sun	jre	—	—
sun	jre	—	—