CVE-2013-5905

Severity

51%

Complexity

49%

Confidentiality

106%

Per: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html "Applies to installation process on client deployment of Java."

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5906.

Per: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html "Applies to installation process on client deployment of Java."

CVSS 2.0 Base Score 5.1. CVSS Attack Vector: network. CVSS Attack Complexity: high. CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:P).

Overview

Type

Oracle

First reported 11 years ago

2014-01-15 16:08:00

Last updated 7 years ago

2018-01-05 02:29:00

Affected Software

Oracle JDK 1.5.0 Update 55

1.5.0

Oracle JRE 1.5.0 Update 55

1.5.0

Oracle JDK 1.6.0 Update 65

1.6.0

Oracle JRE 1.6.0 Update 65

1.6.0

Oracle JDK 1.7.0 Update 45

1.7.0

Oracle JRE 1.7.0 Update 45

1.7.0

References

SSRT101454

SSRT101455

102009

RHSA-2014:0030

56485

56535

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Vendor Advisory

64758

64934

1029608

RHSA-2014:0414

oracle-cpujan2014-cve20135905(90341)

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.