CVE-2013-3743 — Oracle JDK vulnerability

6 documents6 sources
Severity
9.3CRITICALNVD
EPSS
7.3%
top 8.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Oracle JDKOracle JRESUN JDK+1 more
Timeline
PublishedJun 18
Latest updateMay 14

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages4 packages

▶NVDoracle/jdk1.6.0+3
▶NVDoracle/jre1.6.0+3
▶NVDsun/jdk1.5.0, 1.6.0+1
▶NVDsun/jre1.5.0, 1.6.0+1

🔴Vulnerability Details

2
GHSA
GHSA-5v44-94cq-c338: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5↗2022-05-14
▶
CVEList
CVE-2013-3743: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5↗2013-06-18
▶

📋Vendor Advisories

2
Ubuntu
OpenJDK 6 vulnerabilities↗2013-07-23
▶
Red Hat
JDK: unspecified vulnerability fixed in 6u51 and 5u51 (AWT)↗2013-06-18
▶

💬Community

1
Bugzilla
CVE-2013-3743 Oracle JDK: unspecified vulnerability fixed in 6u51 and 5u51 (AWT)↗2013-06-19
▶
CVE-2013-3743 — Oracle JDK vulnerability | cvebase