CVE-2013-2464

published 2013-06-18

CVE-2013-2464: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45…

Priority P3 56 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
oracle	jdk	<= 1.7.0	—
oracle	jdk	<= 1.6.0	—
oracle	jdk	<= 1.5.0	—
oracle	jdk	—	—
oracle	jdk	—	—
oracle	jdk	—	—
oracle	jre	<= 1.7.0	—
oracle	jre	<= 1.6.0	—
oracle	jre	<= 1.5.0	—
oracle	jre	—	—
oracle	jre	—	—
oracle	jre	—	—
sun	jdk	—	—
sun	jdk	—	—
sun	jre	—	—
sun	jre	—	—

CVSS provenance

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

vendor_redhat 10.0 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.