CVE-2013-0429: High severity oracle jre vulnerability

Published Feb 2, 2013

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue involves the creation of a single PresentationManager that is shared across multiple thread groups, which allows remote attackers to bypass Java sandbox restrictions.

Affected Software

164 affected components

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

ORACLE JRE=1.6.0-update30

ORACLE JRE=1.6.0-update31

ORACLE JRE=1.6.0-update32

ORACLE JRE=1.6.0-update33

ORACLE JRE=1.6.0-update34

ORACLE JRE=1.6.0-update35

ORACLE JRE=1.6.0-update37

ORACLE JRE=1.6.0-update38

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

Sun JRE=1.6.0-update_9

Oracle JDK=1.6.0-update22

Oracle JDK=1.6.0-update23

Oracle JDK=1.6.0-update24

Oracle JDK=1.6.0-update25

Oracle JDK=1.6.0-update26

Oracle JDK=1.6.0-update27

Oracle JDK=1.6.0-update29

Oracle JDK=1.6.0-update30

Oracle JDK=1.6.0-update31

Oracle JDK=1.6.0-update32

Oracle JDK=1.6.0-update33

Oracle JDK=1.6.0-update34

Oracle JDK=1.6.0-update35

Oracle JDK=1.6.0-update37

Oracle JDK=1.6.0-update38

Sun JDK=1.6.0

Sun JDK=1.6.0-update_10

Sun JDK=1.6.0-update_11

Sun JDK=1.6.0-update_12

Sun JDK=1.6.0-update_13

Sun JDK=1.6.0-update_14

Sun JDK=1.6.0-update_15

Sun JDK=1.6.0-update_16

Sun JDK=1.6.0-update_17

Sun JDK=1.6.0-update_18

Sun JDK=1.6.0-update_19

Sun JDK=1.6.0-update_20

Sun JDK=1.6.0-update_21

Sun JDK=1.6.0-update_3

Sun JDK=1.6.0-update_4

Sun JDK=1.6.0-update_5

Sun JDK=1.6.0-update_6

Sun JDK=1.6.0-update_7

Sun JDK=1.6.0-update1

Sun JDK=1.6.0-update1_b06

Sun JDK=1.6.0-update2

ORACLE JRE=1.5.0-update36

ORACLE JRE=1.5.0-update38

Sun JRE=1.5.0

Sun JRE=1.5.0-update1

Sun JRE=1.5.0-update10

Sun JRE=1.5.0-update11

Sun JRE=1.5.0-update12

Sun JRE=1.5.0-update13

Sun JRE=1.5.0-update14

Sun JRE=1.5.0-update15

Sun JRE=1.5.0-update16

Sun JRE=1.5.0-update17

Sun JRE=1.5.0-update18

Sun JRE=1.5.0-update19

Sun JRE=1.5.0-update2

Sun JRE=1.5.0-update20

Sun JRE=1.5.0-update21

Sun JRE=1.5.0-update22

Sun JRE=1.5.0-update23

Sun JRE=1.5.0-update24

Sun JRE=1.5.0-update25

Sun JRE=1.5.0-update26

Sun JRE=1.5.0-update27

Sun JRE=1.5.0-update28

Sun JRE=1.5.0-update29

Sun JRE=1.5.0-update3

Sun JRE=1.5.0-update31

Sun JRE=1.5.0-update33

Sun JRE=1.5.0-update4

Sun JRE=1.5.0-update5

Sun JRE=1.5.0-update6

Sun JRE=1.5.0-update7

Sun JRE=1.5.0-update8

Sun JRE=1.5.0-update9

Oracle JDK=1.5.0-update36

Oracle JDK=1.5.0-update38

Sun JDK=1.5.0

Sun JDK=1.5.0-update1

Sun JDK=1.5.0-update10

Sun JDK=1.5.0-update11

Sun JDK=1.5.0-update11_b03

Sun JDK=1.5.0-update12

Sun JDK=1.5.0-update13

Sun JDK=1.5.0-update14

Sun JDK=1.5.0-update15

Sun JDK=1.5.0-update16

Sun JDK=1.5.0-update17

Sun JDK=1.5.0-update18

Sun JDK=1.5.0-update19

Sun JDK=1.5.0-update2

Sun JDK=1.5.0-update20

Sun JDK=1.5.0-update21

Sun JDK=1.5.0-update22

Sun JDK=1.5.0-update23

Sun JDK=1.5.0-update24

Sun JDK=1.5.0-update25

Sun JDK=1.5.0-update26

Sun JDK=1.5.0-update27

Sun JDK=1.5.0-update28

Sun JDK=1.5.0-update29

Sun JDK=1.5.0-update3

Sun JDK=1.5.0-update31

Sun JDK=1.5.0-update33

Sun JDK=1.5.0-update4

Sun JDK=1.5.0-update5

Sun JDK=1.5.0-update6

Sun JDK=1.5.0-update7

Sun JDK=1.5.0-update7_b03

Sun JDK=1.5.0-update8

Sun JDK=1.5.0-update9

Event History

Feb 2, 2013

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0429?

CVE-2013-0429 has a critical severity rating due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2013-0429?

To mitigate CVE-2013-0429, upgrade to the latest version of Oracle Java SE or OpenJDK that addresses this vulnerability.

What versions are affected by CVE-2013-0429?

CVE-2013-0429 affects Oracle Java SE 7 through Update 11, 6 through Update 38, and OpenJDK 6 and 7.

What types of attacks are possible with CVE-2013-0429?

CVE-2013-0429 could allow remote attackers to exploit the vulnerability via vectors related to CORBA.

Is CVE-2013-0429 easy to exploit?

Exploitation of CVE-2013-0429 is considered possible, making it important to apply patches promptly.

CVE-2013-0429: High severity oracle jre vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2013-0429?

How do I fix CVE-2013-0429?

What versions are affected by CVE-2013-0429?

What types of attacks are possible with CVE-2013-0429?

Is CVE-2013-0429 easy to exploit?

Company

Resources

Contact