Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | java-1.4.2-ibm | Will not fix | ||
| Red Hat Enterprise Linux 5 | java-1.5.0-ibm | Not affected | ||
| Red Hat Enterprise Linux 5 | java-1.6.0-ibm | Not affected | ||
| Red Hat Enterprise Linux 5 | java-1.7.0-ibm | Not affected | ||
| Red Hat Enterprise Linux 5 | java-1.7.0-openjdk | Not affected | ||
| Red Hat Enterprise Linux 6 | java-1.5.0-ibm | Not affected | ||
| Red Hat Enterprise Linux 6 | java-1.6.0-ibm | Not affected | ||
| Red Hat Enterprise Linux 6 | java-1.7.0-ibm | Not affected | ||
| Red Hat Enterprise Linux 6 | java-1.7.0-openjdk | Not affected | ||
| Supplementary for Red Hat Enterprise Linux 5 | java-1.7.0-oracle | Fixed | RHSA-2013:0237 | 04.02.2013 |
Показывать по
Дополнительная информация
Статус:
EPSS
0 Low
CVSS2
Связанные уязвимости
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
Unspecified vulnerability in the Java Runtime Environment (JRE) compon ...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
EPSS
0 Low
CVSS2