CVE-2013-5788

Опубликовано: 16 окт. 2013

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Комментарий

Per: http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

"Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets."

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1440.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1507.html
Third Party Advisory
http://secunia.com/advisories/56338
Not Applicable
http://www-01.ibm.com/support/docview.wss?uid=swg21655201
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18607
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1440.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1507.html
Third Party Advisory
http://secunia.com/advisories/56338
Not Applicable
http://www-01.ibm.com/support/docview.wss?uid=swg21655201
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18607
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*

Версия до 1.7.0 (исключая)

cpe:2.3:a:oracle:jdk:1.7.0:-:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update13:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update15:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update21:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update25:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*

Версия до 1.7.0 (исключая)

cpe:2.3:a:oracle:jre:1.7.0:-:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update13:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update15:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update21:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update25:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01094

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2013-5788

ubuntu

больше 12 лет назад

CVE-2013-5788

redhat

больше 12 лет назад

CVE-2013-5788

debian

больше 12 лет назад

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java ...

GHSA-qjh7-wg3x-m5hm

github

больше 3 лет назад

SUSE-SU-2015:1086-2

suse-cvrf

около 11 лет назад

Security update for IBM Java

EPSS

Процентиль: 78%

0.01094

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo