CVE-2013-2449
- State
- Published
- Severity
- Not scored
- Published
- Jun 18, 2013
- Updated
- Aug 6, 2024
- Reserved
- Mar 5, 2013
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=975145
- RHSA-2013:1060vendor-advisory
- GLSA-201406-32vendor-advisory
- http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b1a2b9ac9714
- http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
- SUSE-SU-2013:1257vendor-advisory
- HPSBUX02907vendor-advisory
- oval:org.mitre.oval:def:17192vdb-entrysignature
- 54154third-party-advisory
- TA13-169Athird-party-advisory
- http://advisories.mageia.org/MGASA-2013-0185.html
- RHSA-2013:0963vendor-advisory
- oval:org.mitre.oval:def:18717vdb-entrysignature
- MDVSA-2013:183vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21642336
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.