CVE-2013-1489
- State
- Published
- Severity
- Not scored
- Published
- Jan 31, 2013
- Updated
- Aug 6, 2024
- Reserved
- Jan 30, 2013
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:15906vdb-entrysignature
- 20130127 [SE-2012-01] An issue with new Java SE 7 security featuresmailing-list
- TA13-032Athird-party-advisory
- http://www.zdnet.com/java-update-doesnt-prevent-silent-exploits-at-all-7000010422/
- http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/
- VU#858729third-party-advisory
- http://www.scmagazine.com.au/News/330453%2Cjava-still-unsafe-new-flaws-discovered.aspx
- RHSA-2013:0237vendor-advisory
- HPSBUX02857vendor-advisory
- HPSBMU02874vendor-advisory
- http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
- http://www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150
- oval:org.mitre.oval:def:19171vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.