Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ethodHandle lookups, which allows remote attackers to bypass Java sandbox restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16258 - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html - https://bugzilla.redhat.com/show_bug.cgi?id=952649 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ - https://wiki.mageia.org/en/Support/Advisories/MGAS
/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html - http://rhn.redhat.com/errata/RHSA-2013-0752.html - http://www.ubuntu.com/usn/USN-1806-1 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/663b5c744e82 - http://www.ora
ty-announce/2013-05/msg00007.html - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/663b5c744e82 - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html - http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/
CVE ID: CVE-2013-2422 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attac
ssue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19087 - http://security.gentoo.org/glsa/glsa-201406-32.xml - https://bugzilla.redhat.com/show_bug.cgi?id=952642 - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html - http://rhn.redhat.com/errata/RHSA-2013-0758.html
//lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html - http://rhn.redhat.com/errata/RHSA-2013-0758.html - http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ - http://marc.info/?l=bugtraq&m=137283787217316&w=2 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://rhn.redhat.com/errata/RHSA-2013-0757.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 - htt
- http://rhn.redhat.com/errata/RHSA-2013-0757.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html - http://rhn.redhat.com/errata/RHSA-2013-0752.html - http://www.ubuntu.com/usn/USN-1806-1 - http://www.securityfocus.com/bid/59228 - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2899c3dbf5e8 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16561 - http://lists.opensuse.org/opensuse-secur
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16561 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html - http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/ - http://marc.info/?l=bugtraq&m=137283787217316&w=2
CVE ID: CVE-2013-2423 State: PUBLISHED Published: 2013-04-17T15:00:00.000Z Last Updated: 2025-10-22T00:05:43.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as dem
checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://weblog.ikvm.net/PermaLink.aspx?guid=acd2dd6d-1028-4996-95df-efa42ac237f0 - http://www.us-cert.gov/ncas/alerts/TA13-107A - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b453d9be6b3f - http://www.exploit-db.com/exploits/24976 - http://ww
- http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b453d9be6b3f - http://www.exploit-db.com/exploits/24976 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html - http://rhn.redhat.com/errata/RHSA-2013-0752.html - http://www.ubuntu.com/usn/USN-1806-1 - http://blog.spiderlabs.com/2013/04/java-is-so-confusing.html - https://bugzilla.redhat.com/show_bug.cgi?id=952398 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16700 - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html - http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-op
opics/security/javacpuapr2013-1928497.html - http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/
CVE ID: CVE-2013-2424 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator. Additional Analyst Notes:
to "insufficient class access checks" when "creating new instances" using MBeanInstantiator. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19594 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html - http://rhn.redhat.com/errata/RHSA-2013-0758.html - https://bugzilla.redhat.com/show_bug.cgi?id=952509 - http://lists.apple.com/archives/security-announce/2013/A
758.html - https://bugzilla.redhat.com/show_bug.cgi?id=952509 - http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/da1867780fc9 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ - http://marc.info/?l=bugtraq&m=137283787217316&w=2 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://rhn.redhat.com/errata
5.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16314 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html - http://rhn.redhat.com/errata/RHSA-2013-0752.html - https://oval.cisecurity.org/repository/search/definition/oval%3A
ml - http://rhn.redhat.com/errata/RHSA-2013-0752.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19656 - http://www.securityfocus.com/bid/59159 - http://www.ubuntu.com/usn/USN-1806-1 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html - http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/ - http://marc.info/?l=bugtraq&m=137283787217316&w=2
CVE ID: CVE-2013-2425 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16471 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://rhn.redhat.com/errata/RHSA-2013-0757.html - http://www.oracle.com/technetwork/topic
t.gov/ncas/alerts/TA13-107A - http://rhn.redhat.com/errata/RHSA-2013-0757.html - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
CVE ID: CVE-2013-2426 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the
invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - https://wiki.mageia.org/en/Support/Ad
rt/Advisories/MGASA-2013-0130 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 - https://bugzilla.redhat.com/show_bug.cgi?id=952653 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16683 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html - http://rhn.redhat.com/errata/RHSA-2013-0752.html - http://www.ubuntu.com/usn/USN-1806-1 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html - http://hg.openjdk.java.net/jdk7u/jdk7u
-1 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/98ad2f1e25d1 - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html - http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/
CVE ID: CVE-2013-2427 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2428. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://rhn.redhat.com/errata/RHSA-2013-0757.html - https://oval.cisecurity.or
://www.us-cert.gov/ncas/alerts/TA13-107A - http://rhn.redhat.com/errata/RHSA-2013-0757.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16536 - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
CVE ID: CVE-2013-2428 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2427. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16416 - http://www.us-cert.gov/ncas/a
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16416 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://rhn.redhat.com/errata/RHSA-2013-0757.html - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
CVE ID: CVE-2013-2429 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers m
another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html - http://rhn.redhat.com/errata/RHSA-2013-0758.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19203 - http://lists.apple.com/archives/security-announce/2013/Apr/msg000
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A19203 - http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ - http://marc.info/?l=bugtraq&m=137283787217316&w=2 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Doc
ctID=c03898880 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - https://bugzilla.redhat.com/show_bug.cgi?id=952521 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19107 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html - http://rhn.redhat.com/errata/RHSA-2013-0752.html - http://www.ubuntu.com/usn/USN-1806-1 - http://rhn.redhat.com/errata/RHSA-2013-1456.htm
.com/errata/RHSA-2013-0752.html - http://www.ubuntu.com/usn/USN-1806-1 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html - http://www.securityfocus.com/bid/59184 - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html - http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/ - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html - http://marc.info/?l=bugtraq&m=137283787217316&w=2 - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/90c9f1577a0b
CVE ID: CVE-2013-2430 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using nati
commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html - http://rhn.redhat.com/errata/RHSA-2013-0758.html - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/d868fe7c7618 - http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html - http://www.mandriva.com/secu
v/d868fe7c7618 - http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 - https://bugzilla.redhat.com/show_bug.cgi?id=952524 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19715 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ - http://marc.info/?l=bugtraq&m=137283787217316&w=2 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c0389
rhn.redhat.com/errata/RHSA-2013-1455.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 - http://www.securityfocus.com/bid/59243 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html - http://rhn.redhat.com/errata/RHSA-2013-0752.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
hat.com/errata/RHSA-2013-0752.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15708 - http://www.ubuntu.com/usn/USN-1806-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19536 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html - http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/ - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html - http://marc.info/?l=bugtraq&m=137283787217316&w=2
CVE ID: CVE-2013-2431 State: PUBLISHED Published: 2013-04-17T15:00:00 Last Updated: 2024-08-06T15:36:46.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to bypassing the Java sandbox using "method handle intrinsic frames." Additional Analyst Notes: - CVE Program Container: References: -
he Java sandbox using "method handle intrinsic frames." Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 - http://www.us-cert.gov/ncas/alerts/TA13-107A - http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16410 - http://rhn.redhat.com/errata/RHSA-2013-0757.html - https://wiki.mageia.