Описание
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 6b27-1.12.5-1ubuntu1 |
| hardy | ignored | end of life |
| lucid | released | 6b27-1.12.5-0ubuntu0.10.04.1 |
| oneiric | released | 6b27-1.12.5-0ubuntu0.11.10.1 |
| precise | released | 6b27-1.12.5-0ubuntu0.12.04.1 |
| quantal | released | 6b27-1.12.5-0ubuntu0.12.10.1 |
| raring | released | 6b27-1.12.5-1ubuntu1 |
| upstream | deferred | 2013-04-19 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | ignored | end of life |
| oneiric | ignored | end of life |
| precise | DNE | |
| quantal | DNE | |
| raring | DNE | |
| upstream | deferred | 2013-04-19 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 7u21-2.3.9-1ubuntu1 |
| hardy | DNE | |
| lucid | DNE | |
| oneiric | released | 7u21-2.3.9-0ubuntu0.11.10.1 |
| precise | released | 7u21-2.3.9-0ubuntu0.12.04.1 |
| quantal | released | 2013-04-19 |
| raring | released | 7u21-2.3.9-1ubuntu1 |
| upstream | deferred | 2013-04-19 |
Показывать по
Ссылки на источники
10 Critical
CVSS2
Связанные уязвимости
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Updat ...
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
ELSA-2013-0770: java-1.6.0-openjdk security update (IMPORTANT)
10 Critical
CVSS2