CVE-2013-0424
- State
- Published
- Severity
- Not scored
- Published
- Feb 2, 2013
- Updated
- Aug 6, 2024
- Reserved
- Dec 7, 2012
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- GLSA-201406-32vendor-advisory
- MDVSA-2013:095vendor-advisory
- SSRT101156vendor-advisory
- TA13-032Athird-party-advisory
- RHSA-2013:0236vendor-advisory
- RHSA-2013:1455vendor-advisory
- oval:org.mitre.oval:def:19131vdb-entrysignature
- VU#858729third-party-advisory
- SUSE-SU-2013:0478vendor-advisory
- RHSA-2013:0237vendor-advisory
- HPSBUX02857vendor-advisory
- RHSA-2013:0247vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=906813
- oval:org.mitre.oval:def:19522vdb-entrysignature
- HPSBMU02874vendor-advisory
- http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6e173569e1e7
- oval:org.mitre.oval:def:19423vdb-entrysignature
- openSUSE-SU-2013:0312vendor-advisory
- openSUSE-SU-2013:0377vendor-advisory
- 57715vdb-entry
- RHSA-2013:0246vendor-advisory
- RHSA-2013:1456vendor-advisory
- oval:org.mitre.oval:def:16519vdb-entrysignature
- RHSA-2013:0245vendor-advisory
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
- http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.