CVE-2013-0427: Medium severity oracle jre vulnerability

Published Feb 2, 2013

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted.

Affected Software

164 affected components

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

ORACLE JRE=1.6.0-update30

ORACLE JRE=1.6.0-update31

ORACLE JRE=1.6.0-update32

ORACLE JRE=1.6.0-update33

ORACLE JRE=1.6.0-update34

ORACLE JRE=1.6.0-update35

ORACLE JRE=1.6.0-update37

ORACLE JRE=1.6.0-update38

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

Sun JRE=1.6.0-update_9

Oracle JDK=1.6.0-update22

Oracle JDK=1.6.0-update23

Oracle JDK=1.6.0-update24

Oracle JDK=1.6.0-update25

Oracle JDK=1.6.0-update26

Oracle JDK=1.6.0-update27

Oracle JDK=1.6.0-update29

Oracle JDK=1.6.0-update30

Oracle JDK=1.6.0-update31

Oracle JDK=1.6.0-update32

Oracle JDK=1.6.0-update33

Oracle JDK=1.6.0-update34

Oracle JDK=1.6.0-update35

Oracle JDK=1.6.0-update37

Oracle JDK=1.6.0-update38

Sun JDK=1.6.0

Sun JDK=1.6.0-update_10

Sun JDK=1.6.0-update_11

Sun JDK=1.6.0-update_12

Sun JDK=1.6.0-update_13

Sun JDK=1.6.0-update_14

Sun JDK=1.6.0-update_15

Sun JDK=1.6.0-update_16

Sun JDK=1.6.0-update_17

Sun JDK=1.6.0-update_18

Sun JDK=1.6.0-update_19

Sun JDK=1.6.0-update_20

Sun JDK=1.6.0-update_21

Sun JDK=1.6.0-update_3

Sun JDK=1.6.0-update_4

Sun JDK=1.6.0-update_5

Sun JDK=1.6.0-update_6

Sun JDK=1.6.0-update_7

Sun JDK=1.6.0-update1

Sun JDK=1.6.0-update1_b06

Sun JDK=1.6.0-update2

ORACLE JRE=1.5.0-update36

ORACLE JRE=1.5.0-update38

Sun JRE=1.5.0

Sun JRE=1.5.0-update1

Sun JRE=1.5.0-update10

Sun JRE=1.5.0-update11

Sun JRE=1.5.0-update12

Sun JRE=1.5.0-update13

Sun JRE=1.5.0-update14

Sun JRE=1.5.0-update15

Sun JRE=1.5.0-update16

Sun JRE=1.5.0-update17

Sun JRE=1.5.0-update18

Sun JRE=1.5.0-update19

Sun JRE=1.5.0-update2

Sun JRE=1.5.0-update20

Sun JRE=1.5.0-update21

Sun JRE=1.5.0-update22

Sun JRE=1.5.0-update23

Sun JRE=1.5.0-update24

Sun JRE=1.5.0-update25

Sun JRE=1.5.0-update26

Sun JRE=1.5.0-update27

Sun JRE=1.5.0-update28

Sun JRE=1.5.0-update29

Sun JRE=1.5.0-update3

Sun JRE=1.5.0-update31

Sun JRE=1.5.0-update33

Sun JRE=1.5.0-update4

Sun JRE=1.5.0-update5

Sun JRE=1.5.0-update6

Sun JRE=1.5.0-update7

Sun JRE=1.5.0-update8

Sun JRE=1.5.0-update9

Oracle JDK=1.5.0-update36

Oracle JDK=1.5.0-update38

Sun JDK=1.5.0

Sun JDK=1.5.0-update1

Sun JDK=1.5.0-update10

Sun JDK=1.5.0-update11

Sun JDK=1.5.0-update11_b03

Sun JDK=1.5.0-update12

Sun JDK=1.5.0-update13

Sun JDK=1.5.0-update14

Sun JDK=1.5.0-update15

Sun JDK=1.5.0-update16

Sun JDK=1.5.0-update17

Sun JDK=1.5.0-update18

Sun JDK=1.5.0-update19

Sun JDK=1.5.0-update2

Sun JDK=1.5.0-update20

Sun JDK=1.5.0-update21

Sun JDK=1.5.0-update22

Sun JDK=1.5.0-update23

Sun JDK=1.5.0-update24

Sun JDK=1.5.0-update25

Sun JDK=1.5.0-update26

Sun JDK=1.5.0-update27

Sun JDK=1.5.0-update28

Sun JDK=1.5.0-update29

Sun JDK=1.5.0-update3

Sun JDK=1.5.0-update31

Sun JDK=1.5.0-update33

Sun JDK=1.5.0-update4

Sun JDK=1.5.0-update5

Sun JDK=1.5.0-update6

Sun JDK=1.5.0-update7

Sun JDK=1.5.0-update7_b03

Sun JDK=1.5.0-update8

Sun JDK=1.5.0-update9

Event History

Feb 2, 2013

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0427?

CVE-2013-0427 has been classified as a high-severity vulnerability due to its potential impact on the integrity of the Java Runtime Environment.

Which software versions are affected by CVE-2013-0427?

CVE-2013-0427 affects Oracle Java SE versions 5.0 through Update 38, 6 through Update 38, 7 through Update 11, and OpenJDK 6 and 7.

How can I fix CVE-2013-0427?

To mitigate the risk associated with CVE-2013-0427, users should update their Java Runtime Environment to the latest version that is not affected.

Can CVE-2013-0427 be exploited remotely?

Yes, CVE-2013-0427 can be exploited by remote attackers, potentially leading to unauthorized access or manipulation.

What are the potential consequences of CVE-2013-0427?

Successful exploitation of CVE-2013-0427 could allow attackers to affect the integrity of the Java applications running in the vulnerable environment.