CVE-2013-2419

Severity

50%

Complexity

99%

Confidentiality

48%

1.Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.

1.Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

First reported 11 years ago

2013-04-17 18:55:00

Last updated 7 years ago

2017-09-19 01:36:00

Affected Software

Oracle JRE 1.7.0

1.7.0

Oracle JRE 1.7.0 update1

1.7.0

Oracle JRE 1.7.0 Update 10

1.7.0

Oracle JRE 1.7.0 Update 11

1.7.0

Oracle JRE 1.7.0 Update 13

1.7.0

Oracle JRE 1.7.0 Update 15

1.7.0

Oracle JRE 1.7.0 update2

1.7.0

Oracle JRE 1.7.0 update3

1.7.0

Oracle JRE 1.7.0 Update 4

1.7.0

Oracle JRE 1.7.0 Update 5

1.7.0

Oracle JRE 1.7.0 Update 6

1.7.0

Oracle JRE 1.7.0 Update 7

1.7.0

Oracle JRE 1.7.0 Update 9

1.7.0

Oracle JDK 1.7.0

1.7.0

Oracle JDK 1.7.0 update1

1.7.0

Oracle JDK 1.7.0 Update 10

1.7.0

Oracle JDK 1.7.0 Update 11

1.7.0

Oracle JDK 1.7.0 Update 13

1.7.0

Oracle JDK 1.7.0 Update 15

1.7.0

Oracle JDK 1.7.0 update2

1.7.0

Oracle JDK 1.7.0 update3

1.7.0

Oracle JDK 1.7.0 Update 4

1.7.0

Oracle JDK 1.7.0 Update 5

1.7.0

Oracle JDK 1.7.0 Update 6

1.7.0

Oracle JDK 1.7.0 Update 7

1.7.0

Oracle JDK 1.7.0 Update 9

1.7.0

Oracle JRE 1.6.0 Update 22

1.6.0

Oracle JRE 1.6.0 Update 23

1.6.0

Oracle JRE 1.6.0 Update 24

1.6.0

Oracle JRE 1.6.0 Update 25

1.6.0

Oracle JRE 1.6.0 Update 26

1.6.0

Oracle JRE 1.6.0 Update 27

1.6.0

Oracle JRE 1.6.0 Update 29

1.6.0

Oracle JRE 1.6.0 Update 30

1.6.0

Oracle JRE 1.6.0 Update 31

1.6.0

Oracle JRE 1.6.0 Update 32

1.6.0

Oracle JRE 1.6.0 Update 33

1.6.0

Oracle JRE 1.6.0 Update 34

1.6.0

Oracle JRE 1.6.0 Update 35

1.6.0

Oracle JRE 1.6.0 Update 37

1.6.0

Oracle JRE 1.6.0 Update 38

1.6.0

Oracle JRE 1.6.0 Update 39

1.6.0

Oracle JRE 1.6.0 Update 41

1.6.0

Sun JRE 1.6.0

1.6.0

Sun JRE 1.6.0 Update 1

1.6.0

Sun JRE 1.6.0 Update 10

1.6.0

Sun JRE 1.6.0 Update 11

1.6.0

Sun JRE 1.6.0 Update 12

1.6.0

Sun JRE 1.6.0 Update 13

1.6.0

Sun JRE 1.6.0 Update 14

1.6.0

Sun JRE 1.6.0 Update 15

1.6.0

Sun JRE 1.6.0 Update 16

1.6.0

Sun JRE 1.6.0 Update 17

1.6.0

Sun JRE 1.6.0 Update 18

1.6.0

Sun JRE 1.6.0 Update 19

1.6.0

Sun JRE 1.6.0 Update 2

1.6.0

Sun JRE 1.6.0 Update 20

1.6.0

Sun JRE 1.6.0 Update 21

1.6.0

Sun JRE 1.6.0 Update 3

1.6.0

Sun JRE 1.6.0 Update 4

1.6.0

Sun JRE 1.6.0 Update 5

1.6.0

Sun JRE 1.6.0 Update 6

1.6.0

Sun JRE 1.6.0 Update 7

1.6.0

Sun JRE 1.6.0 Update 9

1.6.0

Oracle JDK 1.6.0 Update 22

1.6.0

Oracle JDK 1.6.0 Update 23

1.6.0

Oracle JDK 1.6.0 Update 24

1.6.0

Oracle JDK 1.6.0 Update 25

1.6.0

Oracle JDK 1.6.0 Update 26

1.6.0

Oracle JDK 1.6.0 Update 27

1.6.0

Oracle JDK 1.6.0 Update 29

1.6.0

Oracle JDK 1.6.0 Update 30

1.6.0

Oracle JDK 1.6.0 Update 31

1.6.0

Oracle JDK 1.6.0 Update 32

1.6.0

Oracle JDK 1.6.0 Update 33

1.6.0

Oracle JDK 1.6.0 Update 34

1.6.0

Oracle JDK 1.6.0 Update 35

1.6.0

Oracle JDK 1.6.0 Update 37

1.6.0

Oracle JDK 1.6.0 Update 38

1.6.0

Oracle JDK 1.6.0 Update 39

1.6.0

Oracle JDK 1.6.0 Update 41

1.6.0

Sun JDK 1.6.0

1.6.0

Sun JDK 6 Update 1

1.6.0

Sun JDK 1.6.0_01-b06

1.6.0

Sun JDK 6 Update 2

1.6.0

Sun JDK 1.6.0 Update 10

1.6.0

Sun JDK 1.6.0 Update 11

1.6.0

Sun JDK 1.6.0 Update 12

1.6.0

Sun JDK 1.6.0 Update 13

1.6.0

Sun JDK 1.6.0 Update 14

1.6.0

Sun JDK 1.6.0 Update 15

1.6.0

Sun JDK 1.6.0 Update 16

1.6.0

Sun JDK 1.6.0 Update 17

1.6.0

Sun JDK 1.6.0 Update 18

1.6.0

Sun JDK 1.6.0 Update 19

1.6.0

Sun JDK 1.6.0 Update 20

1.6.0

Sun JDK 1.6.0 Update 21

1.6.0

Sun JDK 1.6.0 Update 3

1.6.0

Sun JDK 1.6.0 Update 4

1.6.0

Sun JDK 1.6.0 Update 5

1.6.0

Sun JDK 1.6.0 Update 6

1.6.0

Sun JDK 1.6.0 Update 7

1.6.0

Oracle JRE 1.5.0_36 (JRE 5.0 Update 36)

1.5.0

Oracle JRE 1.5.0_38 (Update 38)

1.5.0

Oracle JRE 1.5.0_40 (Update 40)

1.5.0

Sun JRE 1.5.0

1.5.0

Sun JRE 1.5.0_1 (JRE 5.0 Update 1)

1.5.0

Sun JRE 1.5.0_10 (JRE 5.0 Update 10)

1.5.0

Sun JRE 1.5.0_11 (JRE 5.0 Update 11)

1.5.0

Sun JRE 1.5.0_12 (JRE 5.0 Update 12)

1.5.0

Sun JRE 1.5.0_13 (JRE 5.0 Update 13)

1.5.0

Sun JRE 1.5.0_14 (JRE 5.0 Update 14)

1.5.0

Sun JRE 1.5.0_15 (JRE 5.0 Update 15)

1.5.0

Sun JRE 1.5.0_16 (JRE 5.0 Update 16)

1.5.0

Sun JRE 1.5.0_17 (JRE 5.0 Update 17)

1.5.0

Sun JRE 1.5.0_18 (JRE 5.0 Update 18)

1.5.0

Sun JRE 1.5.0_19 (JRE 5.0 Update 19)

1.5.0

Sun JRE 1.5.0_2 (JRE 5.0 Update 2)

1.5.0

Sun JRE 1.5.0_20 (JRE 5.0 Update 20)

1.5.0

Sun JRE 1.5.0_21 (JRE 5.0 Update 21)

1.5.0

Sun JRE 1.5.0_22 (JRE 5.0 Update 22)

1.5.0

Sun JRE 1.5.0_23 (JRE 5.0 Update 23)

1.5.0

Sun JRE 1.5.0_24 (JRE 5.0 Update 24)

1.5.0

Sun JRE 1.5.0_25 (JRE 5.0 Update 25)

1.5.0

Sun JRE 1.5.0_26 (JRE 5.0 Update 26)

1.5.0

Sun JRE 1.5.0_27 (JRE 5.0 Update 27)

1.5.0

Sun JRE 1.5.0_28 (JRE 5.0 Update 28)

1.5.0

Sun JRE 1.5.0_29 (JRE 5.0 Update 29)

1.5.0

Sun JRE 1.5.0_3 (JRE 5.0 Update 3)

1.5.0

Sun JRE 1.5.0_31 (JRE 5.0 Update 31)

1.5.0

Sun JRE 1.5.0_33 (JRE 5.0 Update 33)

1.5.0

Sun JRE 1.5.0_4 (JRE 5.0 Update 4)

1.5.0

Sun JRE 1.5.0_5 (JRE 5.0 Update 5)

1.5.0

Sun JRE 1.5.0_6 (JRE 5.0 Update 6)

1.5.0

Sun JRE 1.5.0_7 (JRE 5.0 Update 7)

1.5.0

Sun JRE 1.5.0_8 (JRE 5.0 Update 8)

1.5.0

Sun JRE 1.5.0_9 (JRE 5.0 Update 9)

1.5.0

Oracle JDK 1.5.0 Update 36

1.5.0

Oracle JDK 1.5.0 Update 38

1.5.0

Oracle JDK 1.5.0 Update 40

1.5.0

Sun JDK 1.5.0

1.5.0

Sun JDK 5.0 Update1

1.5.0

Sun JDK 5.0 Update10

1.5.0

Sun JDK 5.0 Update11

1.5.0

Sun JDK 1.5.0_11 b03

1.5.0

Sun JDK 5.0 Update12

1.5.0

Sun JDK 5.0 Update 13

1.5.0

Sun JDK 5.0 Update 14

1.5.0

Sun JDK 5.0 Update 15

1.5.0

Sun JDK 5.0 Update 16

1.5.0

Sun JDK 5.0 Update 17

1.5.0

Sun JDK 5.0 Update 18

1.5.0

Sun JDK 5.0 Update 19

1.5.0

Sun JDK 5.0 Update2

1.5.0

Sun JDK 5.0 Update 20

1.5.0

Sun JDK 5.0 Update 21

1.5.0

Sun JDK 5.0 Update 22

1.5.0

Sun JDK 5.0 Update 23

1.5.0

Sun JDK 5.0 Update 24

1.5.0

Sun JDK 5.0 Update 25

1.5.0

Sun JDK 5.0 Update 26

1.5.0

Sun JDK 5.0 Update 27

1.5.0

Sun JDK 5.0 Update 28

1.5.0

Sun JDK 5.0 Update 29

1.5.0

Sun JDK 5.0 Update3

1.5.0

Sun JDK 5.0 Update 31

1.5.0

Sun JDK 1.5.0_33 (JDK 5.0 Update 33)

1.5.0

Sun JDK 5.0 Update4

1.5.0

Sun JDK 5.0 Update5

1.5.0

Sun JDK 1.5.0_6

1.5.0

Sun JDK 5.0 Update7

1.5.0

Sun JDK 1.5 _07-b03

1.5.0

Sun JDK 5.0 Update8

1.5.0

Sun JDK 5.0 Update9

1.5.0

References

http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/

http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/

http://bugs.icu-project.org/trac/ticket/10107

SSRT101305

APPLE-SA-2013-04-16-2

SUSE-SU-2013:0814

SUSE-SU-2013:0835

SUSE-SU-2013:0871

SUSE-SU-2013:0934

openSUSE-SU-2013:0777

openSUSE-SU-2013:0964

[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!

SSRT101252

RHSA-2013:0752

RHSA-2013:0757

RHSA-2013:0758

RHSA-2013:1455

RHSA-2013:1456

GLSA-201406-32

http://site.icu-project.org/download/51#TOC-Known-Issues

MDVSA-2013:145

MDVSA-2013:161

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html

Vendor Advisory

59131

USN-1806-1

TA13-107A

US Government Resource

https://bugzilla.redhat.com/show_bug.cgi?id=952656

oval:org.mitre.oval:def:16527

oval:org.mitre.oval:def:19386

oval:org.mitre.oval:def:19526

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.