CVE-2013-1475 in Java

Resumen (Inglés)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "IIOP type reuse management" in ObjectStreamClass.java.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2013-01-30

Divulgación

2013-02-01

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
7519	Oracle Java CORBA ObjectStreamClass.java secuencias de comandos en sitios cruzados	80	No está definido	Arreglo oficial	CVE-2013-1475

Fuentes

• MITRE
• NVD
• CVE Details