CVE-2013-2465

Published: Jun 18, 2013Modified: Apr 22, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.

Affected (104)

Products: Oracle: Jre · Sun: Jre · Suse: Linux Enterprise Desktop, Linux Enterprise Java, Linux Enterprise Server, Linux Enterprise Software Development Kit

1 product

1 product

4 products

Linux Enterprise Desktop

Linux Enterprise Java

Linux Enterprise Server

Linux Enterprise Software Development Kit

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Oracle Jre	Version 1.7.0
Oracle Jre	Version 1.7.0 update10
Oracle Jre	Version 1.7.0 update11
Oracle Jre	Version 1.7.0 update13
Oracle Jre	Version 1.7.0 update15
Oracle Jre	Version 1.7.0 update17
Oracle Jre	Version 1.7.0 update1
Oracle Jre	Version 1.7.0 update21
Oracle Jre	Version 1.7.0 update2
Oracle Jre	Version 1.7.0 update3
Oracle Jre	Version 1.7.0 update4
Oracle Jre	Version 1.7.0 update5
Oracle Jre	Version 1.7.0 update6
Oracle Jre	Version 1.7.0 update7
Oracle Jre	Version 1.7.0 update9

Configuration B

39 vulnerable

Vulnerable Software	Affected Versions
Oracle Jre	Version 1.6.0
Oracle Jre	Version 1.6.0 update22
Oracle Jre	Version 1.6.0 update23
Oracle Jre	Version 1.6.0 update24
Oracle Jre	Version 1.6.0 update25
Oracle Jre	Version 1.6.0 update26
Oracle Jre	Version 1.6.0 update27
Oracle Jre	Version 1.6.0 update29
Oracle Jre	Version 1.6.0 update30
Oracle Jre	Version 1.6.0 update31
Oracle Jre	Version 1.6.0 update32
Oracle Jre	Version 1.6.0 update33
Oracle Jre	Version 1.6.0 update34
Oracle Jre	Version 1.6.0 update35
Oracle Jre	Version 1.6.0 update37
Oracle Jre	Version 1.6.0 update38
Oracle Jre	Version 1.6.0 update39
Oracle Jre	Version 1.6.0 update41
Oracle Jre	Version 1.6.0 update43
Oracle Jre	Version 1.6.0 update45
Sun Jre	Version 1.6.0 update_10
Sun Jre	Version 1.6.0 update_11
Sun Jre	Version 1.6.0 update_12
Sun Jre	Version 1.6.0 update_13
Sun Jre	Version 1.6.0 update_14
Sun Jre	Version 1.6.0 update_15
Sun Jre	Version 1.6.0 update_16
Sun Jre	Version 1.6.0 update_17
Sun Jre	Version 1.6.0 update_18
Sun Jre	Version 1.6.0 update_19
Sun Jre	Version 1.6.0 update_1
Sun Jre	Version 1.6.0 update_20
Sun Jre	Version 1.6.0 update_21
Sun Jre	Version 1.6.0 update_3
Sun Jre	Version 1.6.0 update_4
Sun Jre	Version 1.6.0 update_5
Sun Jre	Version 1.6.0 update_6
Sun Jre	Version 1.6.0 update_7
Sun Jre	Version 1.6.0 update_9

Configuration C

38 vulnerable

Vulnerable Software	Affected Versions
Oracle Jre	Version 1.5.0
Oracle Jre	Version 1.5.0 update36
Oracle Jre	Version 1.5.0 update38
Oracle Jre	Version 1.5.0 update39
Oracle Jre	Version 1.5.0 update40
Oracle Jre	Version 1.5.0 update41
Oracle Jre	Version 1.5.0 update45
Sun Jre	Version 1.5.0 update10
Sun Jre	Version 1.5.0 update11
Sun Jre	Version 1.5.0 update12
Sun Jre	Version 1.5.0 update13
Sun Jre	Version 1.5.0 update14
Sun Jre	Version 1.5.0 update15
Sun Jre	Version 1.5.0 update16
Sun Jre	Version 1.5.0 update17
Sun Jre	Version 1.5.0 update18
Sun Jre	Version 1.5.0 update19
Sun Jre	Version 1.5.0 update1
Sun Jre	Version 1.5.0 update20
Sun Jre	Version 1.5.0 update21
Sun Jre	Version 1.5.0 update22
Sun Jre	Version 1.5.0 update23
Sun Jre	Version 1.5.0 update24
Sun Jre	Version 1.5.0 update25
Sun Jre	Version 1.5.0 update26
Sun Jre	Version 1.5.0 update27
Sun Jre	Version 1.5.0 update28
Sun Jre	Version 1.5.0 update29
Sun Jre	Version 1.5.0 update2
Sun Jre	Version 1.5.0 update31
Sun Jre	Version 1.5.0 update33
Sun Jre	Version 1.5.0 update3
Sun Jre	Version 1.5.0 update4
Sun Jre	Version 1.5.0 update5
Sun Jre	Version 1.5.0 update6
Sun Jre	Version 1.5.0 update7
Sun Jre	Version 1.5.0 update8
Sun Jre	Version 1.5.0 update9

Configuration D

12 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 10 sp4
Suse Linux Enterprise Java	Version 10 sp4
Suse Linux Enterprise Java	Version 11 sp2
Suse Linux Enterprise Java	Version 11 sp3
Suse Linux Enterprise Server	Version 10 sp3
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Software Development Kit	Version 11 sp2
Suse Linux Enterprise Software Development Kit	Version 11 sp3

Related CWEs

CWE-693

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

References (65)

http://advisories.mageia.org/MGASA-2013-0185.html

Source: secalert_us@oracle.com

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880

Source: secalert_us@oracle.com

Broken Link

http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040

Source: secalert_us@oracle.com

Patch

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=137545505800971&w=2

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=137545592101387&w=2

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-0963.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1059.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1060.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1081.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1455.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1456.html

Source: secalert_us@oracle.com

Third Party Advisory

http://secunia.com/advisories/54154

Source: secalert_us@oracle.com

Not Applicable

http://security.gentoo.org/glsa/glsa-201406-32.xml

Source: secalert_us@oracle.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21642336

Source: secalert_us@oracle.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:183

Source: secalert_us@oracle.com

Not Applicable

http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/bid/60657

Source: secalert_us@oracle.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.us-cert.gov/ncas/alerts/TA13-169A

Source: secalert_us@oracle.com

Third Party AdvisoryUS Government Resource

https://access.redhat.com/errata/RHSA-2014:0414

Source: secalert_us@oracle.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=975118

Source: secalert_us@oracle.com

Issue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106

Source: secalert_us@oracle.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074

Source: secalert_us@oracle.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455

Source: secalert_us@oracle.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703

Source: secalert_us@oracle.com

Broken Link

http://advisories.mageia.org/MGASA-2013-0185.html