CVE-2013-2439 — Oracle Javafx vulnerability

5 documents5 sources
Severity
6.9MEDIUMNVD
EPSS
0.1%
top 72.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Oracle JavafxOracle JDKOracle JRE+2 more
Timeline
PublishedApr 17
Latest updateMay 14

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages5 packages

▶NVDoracle/javafx2.2.7+8
▶NVDoracle/jdk1.7.0+5
▶NVDoracle/jre1.7.0+5
▶NVDsun/jdk1.5.0, 1.6.0+1
▶NVDsun/jre1.5.0, 1.6.0+1

🔴Vulnerability Details

2
GHSA
GHSA-v7j5-xfvg-jhj2: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5↗2022-05-14
▶
CVEList
CVE-2013-2439: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5↗2013-04-17
▶

📋Vendor Advisories

1
Red Hat
JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)↗2013-04-16
▶

💬Community

1
Bugzilla
CVE-2013-2439 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)↗2013-04-17
▶
CVE-2013-2439 — Oracle Javafx vulnerability | cvebase