CVE-2013-2435

published 2013-04-17

CVE-2013-2435: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2440.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
oracle	jdk	<= 1.7.0	—
oracle	jdk	<= 1.6.0	—
oracle	jdk	—	—
oracle	jdk	—	—
oracle	jre	<= 1.7.0	—
oracle	jre	<= 1.6.0	—
oracle	jre	—	—
oracle	jre	—	—
sun	jdk	—	—
sun	jre	—	—