Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-2427
HistoryApr 17, 2013 - 12:00 a.m.

CVE-2013-2427

2013-04-1700:00:00
ubuntu.com
ubuntu.com
10

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.287

Percentile

96.9%

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to JavaFX, a different
vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2428.

Notes

Author Note
mdeslaur in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked as of 2013-04-19, IcedTea has not released 1.12.5 to fix this issue does not affect icedtea 2.3

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.287

Percentile

96.9%