Lucene search

K

Veracode Vulnerability DatabaseVERACODE:14587

HistoryMay 02, 2019 - 4:53 a.m.

Arbitrary Code Execution

2019-05-0204:53:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

14

0.966 High

EPSS

Percentile

99.6%

openjdk is vulnerable to arbitrary code execution. It was discovered that the 2D component did not properly reject certain malformed images. Specially-crafted raster parameters could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges.

CPENameOperatorVersion
java-1.7.0-openjdkeq1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdkeq1.7.0.9__2.3.4.1.el6_3
java-1.7.0-openjdkeq1.7.0.9__2.3.3.2.el6_3
java-1.7.0-openjdkeq1.7.0.5__2.2.1.el6_3
java-1.7.0-openjdkeq1.7.0.9__2.3.4.el5_9.1
java-1.7.0-openjdkeq1.7.0.3__2.1.el6.7
java-1.7.0-openjdkeq1.7.0.9__2.3.5.3.el5_9
java-1.7.0-openjdkeq1.7.0.9__2.3.7.1.el5_9
java-1.7.0-openjdkeq1.7.0.9__2.3.7.1.el6_3
java-1.7.0-openjdkeq1.7.0.9__2.3.3.el6_3.1

Rows per page:

1-10 of 1101

References

blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html

h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04117626-1

icedtea.classpath.org/hg/release/icedtea7-2.3/file/icedtea-2.3.8/NEWS

lists.opensuse.org/opensuse-security-announce/2013-03/msg00009.html

lists.opensuse.org/opensuse-security-announce/2013-03/msg00011.html

lists.opensuse.org/opensuse-security-announce/2013-03/msg00012.html

lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html

mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html

marc.info/?l=bugtraq&m=136439120408139&w=2

marc.info/?l=bugtraq&m=136570436423916&w=2

rhn.redhat.com/errata/RHSA-2013-0601.html

rhn.redhat.com/errata/RHSA-2013-0603.html

rhn.redhat.com/errata/RHSA-2013-0604.html

rhn.redhat.com/errata/RHSA-2013-1455.html

rhn.redhat.com/errata/RHSA-2013-1456.html

security.gentoo.org/glsa/glsa-201406-32.xml

www.exploit-db.com/exploits/24904

www.kb.cert.org/vuls/id/688246

www.mandriva.com/security/advisories?name=MDVSA-2013:095

www.oracle.com/ocom/groups/public/@otn/documents/webcontent/1915099.xml

www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html

www.securityfocus.com/bid/58238

www.securitytracker.com/id/1029803

www.symantec.com/connect/blogs/latest-java-zero-day-shares-connections-bit9-security-incident

www.ubuntu.com/usn/USN-1755-2

www.us-cert.gov/ncas/alerts/TA13-064A

access.redhat.com/security/updates/classification/#critical

bugzilla.redhat.com/show_bug.cgi?id=917553

krebsonsecurity.com/2013/03/new-java-0-day-attack-echoes-bit9-breach/

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19246

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19477

rhn.redhat.com/errata/RHSA-2013-0602.html

twitter.com/jduck1337/status/307629902574800897

wiki.mageia.org/en/Support/Advisories/MGASA-2013-0088

0.966 High

EPSS

Percentile

99.6%