CVE-2013-2444Oracle Javafx vulnerability

7 documents6 sources
Severity
5.0MEDIUMNVD
EPSS
4.9%
top 10.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 18
Latest updateMay 14

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages5 packages

NVDoracle/javafx2.2.21+9
NVDoracle/jdk1.7.0+5
NVDoracle/jre1.7.0+5
NVDsun/jdk1.5.0, 1.6.0+1
NVDsun/jre1.5.0, 1.6.0+1

🔴Vulnerability Details

2
GHSA
GHSA-v66j-q7ff-pvwx: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 52022-05-14
CVEList
CVE-2013-2444: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 52013-06-18

📋Vendor Advisories

3
Ubuntu
OpenJDK 6 vulnerabilities2013-07-23
Ubuntu
OpenJDK 7 vulnerabilities2013-07-16
Red Hat
OpenJDK: Resource denial of service (AWT, 8001038)2013-06-18

💬Community

1
Bugzilla
CVE-2013-2444 OpenJDK: Resource denial of service (AWT, 8001038)2013-06-17
CVE-2013-2444 — Oracle Javafx vulnerability | cvebase