CVE-2013-2419

Published: Apr 17, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.

Affected (180)

Products: Oracle: Jre, Jdk · Sun: Jre, Jdk

2 products

2 products

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Oracle Jre	Up to 1.7.0
Oracle Jre	Version 1.7.0
Oracle Jre	Version 1.7.0 update10
Oracle Jre	Version 1.7.0 update11
Oracle Jre	Version 1.7.0 update13
Oracle Jre	Version 1.7.0 update15
Oracle Jre	Version 1.7.0 update1
Oracle Jre	Version 1.7.0 update2
Oracle Jre	Version 1.7.0 update3
Oracle Jre	Version 1.7.0 update4
Oracle Jre	Version 1.7.0 update5
Oracle Jre	Version 1.7.0 update6
Oracle Jre	Version 1.7.0 update7
Oracle Jre	Version 1.7.0 update9

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Up to 1.7.0
Oracle Jdk	Version 1.7.0
Oracle Jdk	Version 1.7.0 update10
Oracle Jdk	Version 1.7.0 update11
Oracle Jdk	Version 1.7.0 update13
Oracle Jdk	Version 1.7.0 update15
Oracle Jdk	Version 1.7.0 update1
Oracle Jdk	Version 1.7.0 update2
Oracle Jdk	Version 1.7.0 update3
Oracle Jdk	Version 1.7.0 update4
Oracle Jdk	Version 1.7.0 update5
Oracle Jdk	Version 1.7.0 update6
Oracle Jdk	Version 1.7.0 update7
Oracle Jdk	Version 1.7.0 update9

Configuration C

39 vulnerable

Vulnerable Software	Affected Versions
Oracle Jre	Up to 1.6.0
Oracle Jre	Version 1.6.0 update22
Oracle Jre	Version 1.6.0 update23
Oracle Jre	Version 1.6.0 update24
Oracle Jre	Version 1.6.0 update25
Oracle Jre	Version 1.6.0 update26
Oracle Jre	Version 1.6.0 update27
Oracle Jre	Version 1.6.0 update29
Oracle Jre	Version 1.6.0 update30
Oracle Jre	Version 1.6.0 update31
Oracle Jre	Version 1.6.0 update32
Oracle Jre	Version 1.6.0 update33
Oracle Jre	Version 1.6.0 update34
Oracle Jre	Version 1.6.0 update35
Oracle Jre	Version 1.6.0 update37
Oracle Jre	Version 1.6.0 update38
Oracle Jre	Version 1.6.0 update39
Oracle Jre	Version 1.6.0 update41
Sun Jre	Version 1.6.0
Sun Jre	Version 1.6.0 update_10
Sun Jre	Version 1.6.0 update_11
Sun Jre	Version 1.6.0 update_12
Sun Jre	Version 1.6.0 update_13
Sun Jre	Version 1.6.0 update_14
Sun Jre	Version 1.6.0 update_15
Sun Jre	Version 1.6.0 update_16
Sun Jre	Version 1.6.0 update_17
Sun Jre	Version 1.6.0 update_18
Sun Jre	Version 1.6.0 update_19
Sun Jre	Version 1.6.0 update_1
Sun Jre	Version 1.6.0 update_20
Sun Jre	Version 1.6.0 update_21
Sun Jre	Version 1.6.0 update_2
Sun Jre	Version 1.6.0 update_3
Sun Jre	Version 1.6.0 update_4
Sun Jre	Version 1.6.0 update_5
Sun Jre	Version 1.6.0 update_6
Sun Jre	Version 1.6.0 update_7
Sun Jre	Version 1.6.0 update_9

Configuration D

39 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Up to 1.6.0
Oracle Jdk	Version 1.6.0 update22
Oracle Jdk	Version 1.6.0 update23
Oracle Jdk	Version 1.6.0 update24
Oracle Jdk	Version 1.6.0 update25
Oracle Jdk	Version 1.6.0 update26
Oracle Jdk	Version 1.6.0 update27
Oracle Jdk	Version 1.6.0 update29
Oracle Jdk	Version 1.6.0 update30
Oracle Jdk	Version 1.6.0 update31
Oracle Jdk	Version 1.6.0 update32
Oracle Jdk	Version 1.6.0 update33
Oracle Jdk	Version 1.6.0 update34
Oracle Jdk	Version 1.6.0 update35
Oracle Jdk	Version 1.6.0 update37
Oracle Jdk	Version 1.6.0 update38
Oracle Jdk	Version 1.6.0 update39
Oracle Jdk	Version 1.6.0 update41
Sun Jdk	Version 1.6.0
Sun Jdk	Version 1.6.0 update1
Sun Jdk	Version 1.6.0 update1_b06
Sun Jdk	Version 1.6.0 update2
Sun Jdk	Version 1.6.0 update_10
Sun Jdk	Version 1.6.0 update_11
Sun Jdk	Version 1.6.0 update_12
Sun Jdk	Version 1.6.0 update_13
Sun Jdk	Version 1.6.0 update_14
Sun Jdk	Version 1.6.0 update_15
Sun Jdk	Version 1.6.0 update_16
Sun Jdk	Version 1.6.0 update_17
Sun Jdk	Version 1.6.0 update_18
Sun Jdk	Version 1.6.0 update_19
Sun Jdk	Version 1.6.0 update_20
Sun Jdk	Version 1.6.0 update_21
Sun Jdk	Version 1.6.0 update_3
Sun Jdk	Version 1.6.0 update_4
Sun Jdk	Version 1.6.0 update_5
Sun Jdk	Version 1.6.0 update_6
Sun Jdk	Version 1.6.0 update_7

Configuration E

36 vulnerable

Vulnerable Software	Affected Versions
Oracle Jre	Up to 1.5.0
Oracle Jre	Version 1.5.0 update36
Oracle Jre	Version 1.5.0 update38
Oracle Jre	Version 1.5.0 update40
Sun Jre	Version 1.5.0
Sun Jre	Version 1.5.0 update10
Sun Jre	Version 1.5.0 update11
Sun Jre	Version 1.5.0 update12
Sun Jre	Version 1.5.0 update13
Sun Jre	Version 1.5.0 update14
Sun Jre	Version 1.5.0 update15
Sun Jre	Version 1.5.0 update16
Sun Jre	Version 1.5.0 update17
Sun Jre	Version 1.5.0 update18
Sun Jre	Version 1.5.0 update19
Sun Jre	Version 1.5.0 update1
Sun Jre	Version 1.5.0 update20
Sun Jre	Version 1.5.0 update21
Sun Jre	Version 1.5.0 update22
Sun Jre	Version 1.5.0 update23
Sun Jre	Version 1.5.0 update24
Sun Jre	Version 1.5.0 update25
Sun Jre	Version 1.5.0 update26
Sun Jre	Version 1.5.0 update27
Sun Jre	Version 1.5.0 update28
Sun Jre	Version 1.5.0 update29
Sun Jre	Version 1.5.0 update2
Sun Jre	Version 1.5.0 update31
Sun Jre	Version 1.5.0 update33
Sun Jre	Version 1.5.0 update3
Sun Jre	Version 1.5.0 update4
Sun Jre	Version 1.5.0 update5
Sun Jre	Version 1.5.0 update6
Sun Jre	Version 1.5.0 update7
Sun Jre	Version 1.5.0 update8
Sun Jre	Version 1.5.0 update9

Configuration F

38 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Up to 1.5.0
Oracle Jdk	Version 1.5.0 update36
Oracle Jdk	Version 1.5.0 update38
Oracle Jdk	Version 1.5.0 update40
Sun Jdk	Version 1.5.0
Sun Jdk	Version 1.5.0 update10
Sun Jdk	Version 1.5.0 update11
Sun Jdk	Version 1.5.0 update11_b03
Sun Jdk	Version 1.5.0 update12
Sun Jdk	Version 1.5.0 update13
Sun Jdk	Version 1.5.0 update14
Sun Jdk	Version 1.5.0 update15
Sun Jdk	Version 1.5.0 update16
Sun Jdk	Version 1.5.0 update17
Sun Jdk	Version 1.5.0 update18
Sun Jdk	Version 1.5.0 update19
Sun Jdk	Version 1.5.0 update1
Sun Jdk	Version 1.5.0 update20
Sun Jdk	Version 1.5.0 update21
Sun Jdk	Version 1.5.0 update22
Sun Jdk	Version 1.5.0 update23
Sun Jdk	Version 1.5.0 update24
Sun Jdk	Version 1.5.0 update25
Sun Jdk	Version 1.5.0 update26
Sun Jdk	Version 1.5.0 update27
Sun Jdk	Version 1.5.0 update28
Sun Jdk	Version 1.5.0 update29
Sun Jdk	Version 1.5.0 update2
Sun Jdk	Version 1.5.0 update31
Sun Jdk	Version 1.5.0 update33
Sun Jdk	Version 1.5.0 update3
Sun Jdk	Version 1.5.0 update4
Sun Jdk	Version 1.5.0 update5
Sun Jdk	Version 1.5.0 update6
Sun Jdk	Version 1.5.0 update7
Sun Jdk	Version 1.5.0 update7_b03
Sun Jdk	Version 1.5.0 update8
Sun Jdk	Version 1.5.0 update9

References (68)

http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/

Source: secalert_us@oracle.com

http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/

Source: secalert_us@oracle.com

http://bugs.icu-project.org/trac/ticket/10107

Source: secalert_us@oracle.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880

Source: secalert_us@oracle.com

http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html

Source: secalert_us@oracle.com

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=137283787217316&w=2

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2013-0752.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2013-0757.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2013-0758.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2013-1455.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2013-1456.html

Source: secalert_us@oracle.com

http://security.gentoo.org/glsa/glsa-201406-32.xml

Source: secalert_us@oracle.com

http://site.icu-project.org/download/51#TOC-Known-Issues

Source: secalert_us@oracle.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:145

Source: secalert_us@oracle.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:161

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/bid/59131

Source: secalert_us@oracle.com

http://www.ubuntu.com/usn/USN-1806-1

Source: secalert_us@oracle.com

http://www.us-cert.gov/ncas/alerts/TA13-107A

Source: secalert_us@oracle.com

US Government Resource

https://bugzilla.redhat.com/show_bug.cgi?id=952656

Source: secalert_us@oracle.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16527

Source: secalert_us@oracle.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19386

Source: secalert_us@oracle.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19526

Source: secalert_us@oracle.com

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124

Source: secalert_us@oracle.com

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130

Source: secalert_us@oracle.com

http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/