deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-1112
Published: 2013-01-31
Description: Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via short malformed packets that trigger inefficient processing, aka Bug ID CSCud79136.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/89643; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1112; http://www.securityfocus.com/bid/57604
CVE: CVE-2013-1113
Published: 2013-01-31
Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a crafted parameter value, aka Bug ID CSCue21042.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/89608; http://secunia.com/advisories/51954; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1113
CVE: CVE-2013-0431
Published: 2013-01-31
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-693
References: http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/; http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53; http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html
CVE: CVE-2013-1489
Published: 2013-01-31
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
CVSS Score: 10.0 (HIGH)
References: http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8139&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2
CVE: CVE-2013-1490
Published: 2013-01-31
Description: Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431.  NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors.  NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability.
CVSS Score: 4.3 (MEDIUM)
References: http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/; http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53; http://seclists.org/fulldisclosure/2013/Jan/142
CVE: CVE-2013-0930
Published: 2013-01-31
Description: Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via vectors involving a new device name.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2013-01/0115.html; http://archives.neohapsis.com/archives/bugtraq/2013-01/0115.html
CVE: CVE-2012-5958
Published: 2013-01-31
Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html; http://packetstormsecurity.com/files/160242/libupnp-1.6.18-Denial-Of-Service.html; http://pupnp.sourceforge.net/ChangeLog
CVE: CVE-2012-5959
Published: 2013-01-31
Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html; http://pupnp.sourceforge.net/ChangeLog; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp
CVE: CVE-2012-5960
Published: 2013-01-31
Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html; http://pupnp.sourceforge.net/ChangeLog; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp
CVE: CVE-2012-5961
Published: 2013-01-31
Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka device) field in a UDP packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://pupnp.sourceforge.net/ChangeLog; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp; http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
CVE: CVE-2012-5962
Published: 2013-01-31
Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://pupnp.sourceforge.net/ChangeLog; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp; http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
CVE: CVE-2012-5963
Published: 2013-01-31
Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://pupnp.sourceforge.net/ChangeLog; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp; http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
CVE: CVE-2012-5964
Published: 2013-01-31
Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://pupnp.sourceforge.net/ChangeLog; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp; http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
CVE: CVE-2012-5965
Published: 2013-01-31
Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://pupnp.sourceforge.net/ChangeLog; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp; http://www.debian.org/security/2013/dsa-2614
CVE: CVE-2013-0229
Published: 2013-01-31
Description: The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.
CVSS Score: 7.8 (HIGH)
References: https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play; https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf; https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb
CVE: CVE-2013-0230
Published: 2013-01-31
Description: Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/57608; https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play; https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf
CVE: CVE-2013-1461
Published: 2013-01-31
Description: The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and service crash) via a SOAPAction header that lacks a # (pound sign) character, a different vulnerability than CVE-2013-0230.
CVSS Score: 7.8 (HIGH)
References: https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play; https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf; https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb
CVE: CVE-2013-1462
Published: 2013-01-31
Description: Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play; https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf; https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb
CVE: CVE-2013-1591
Published: 2013-01-31
Description: Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors.  NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943f; http://rhn.redhat.com/errata/RHSA-2013-0687.html; http://rhn.redhat.com/errata/RHSA-2013-0746.html
CVE: CVE-2012-3268
Published: 2013-02-01
Description: Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products; certain HP 3Com Access Controller, Router, and Switch products; certain HP H3C Access Controller, Firewall, Router, Switch, and Switch and Route Processing Unit products; and certain Huawei Firewall/Gateway, Router, Switch, and Wireless products do not properly implement access control as defined in h3c-user.mib 2.0 and hh3c-user.mib 2.0, which allows remote authenticated users to discover credentials in UserInfoEntry values via an SNMP request with the read-only community.
CVSS Score: 3.5 (LOW)
CWE: CWE-522
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0123.html; http://grutztopia.jingojango.net/2012/10/hph3c-and-huawei-snmp-weak-access-to.html; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03515685
CVE: CVE-2012-5661
Published: 2013-02-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: This candidate is a reservation duplicate that was detected before disclosure.  Notes: None
CVE: CVE-2012-1541
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit-based browsers and the Javascript engine, which allows remote attackers to execute arbitrary code by modifying DOM nodes that contain applet elements in a way that triggers an incorrect reference count and a use after free.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8139&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3916&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2
CVE: CVE-2012-1543
Published: 2013-02-02
Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an invalid type cast in the JSObject class.
CVSS Score: 7.6 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2; http://www.kb.cert.org/vuls/id/858729; http://www.oracle.com/technetwork/topics/security/javacpufeb2[PII_REDACTED].html
CVE: CVE-2012-3213
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8139&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3916&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2
CVE: CVE-2012-3342
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8139&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3916&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2
CVE: CVE-2012-4301
Published: 2013-02-02
Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that this issue allows remote attackers to execute arbitrary code via an "invalid type case" in the init method of the D3DShader class in the com.sun.prism.d3d package. CPU.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2; http://www.kb.cert.org/vuls/id/858729; http://www.oracle.com/technetwork/topics/security/javacpufeb2[PII_REDACTED].html
CVE: CVE-2012-4305
Published: 2013-02-02
Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue allows remote attackers to execute arbitrary code via vectors related to an "invalid type cast" and exposed native methods in the T2KGlyph class.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2; http://www.kb.cert.org/vuls/id/858729; http://www.oracle.com/technetwork/topics/security/javacpufeb2[PII_REDACTED].html
CVE: CVE-2013-0351
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8139&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3916&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2
CVE: CVE-2013-0409
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vectors related to JMX.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8139&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3916&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2
CVE: CVE-2013-0419
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
CVSS Score: 7.6 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8139&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3916&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2
CVE: CVE-2013-0423
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
CVSS Score: 7.6 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8139&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3916&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5818&w=2
CVE: CVE-2013-0424
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.
CVSS Score: 5.0 (MEDIUM)
References: http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS; http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6e173569e1e7; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html
CVE: CVE-2013-0425
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0428 and CVE-2013-0426.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions.
CVSS Score: 10.0 (HIGH)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907344; http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS; http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de
CVE: CVE-2013-0426
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions.
CVSS Score: 10.0 (HIGH)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907346; http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS; http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de
CVE: CVE-2013-0427
Published: 2013-02-02
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted.
CVSS Score: 5.0 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907455; http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS; http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/87d135824bdf