Lucene search

OracleCVE-2013-2449

HistoryJun 18, 2013 - 10:55 p.m.

CVE-2013-2449

2013-06-1822:55:02

oracle

web.nvd.nist.gov

cve-2013-2449

oracle java

openjdk

vulnerability

security

confidentiality

java runtime environment

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

7.8

Confidence

High

EPSS

0.007

Percentile

80.7%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.

Affected configurations

Nvd

Node

oraclejreRange≤1.7.0update21

oraclejreMatch1.7.0

oraclejreMatch1.7.0update1

oraclejreMatch1.7.0update10

oraclejreMatch1.7.0update11

oraclejreMatch1.7.0update13

oraclejreMatch1.7.0update15

oraclejreMatch1.7.0update17

oraclejreMatch1.7.0update2

oraclejreMatch1.7.0update3

oraclejreMatch1.7.0update4

oraclejreMatch1.7.0update5

oraclejreMatch1.7.0update6

oraclejreMatch1.7.0update7

oraclejreMatch1.7.0update9

Node

oraclejdkRange≤1.7.0update21

oraclejdkMatch1.7.0

oraclejdkMatch1.7.0update1

oraclejdkMatch1.7.0update10

oraclejdkMatch1.7.0update11

oraclejdkMatch1.7.0update13

oraclejdkMatch1.7.0update15

oraclejdkMatch1.7.0update17

oraclejdkMatch1.7.0update2

oraclejdkMatch1.7.0update3

oraclejdkMatch1.7.0update4

oraclejdkMatch1.7.0update5

oraclejdkMatch1.7.0update6

oraclejdkMatch1.7.0update7

oraclejdkMatch1.7.0update9

VendorProductVersionCPE
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update2::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update6::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update10::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update9::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update15::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update3::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update4::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update11::
oraclejre1.7.0cpe:/a:oracle:jre:1.7.0:update5::

Vendor	Product	Version	CPE
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update2::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update6::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update10::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update9::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update15::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update3::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update4::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update11::
oracle	jre	1.7.0	cpe:/a:oracle:jre:1.7.0:update5::