First published: Fri Feb 01 2013(Updated: )
A flaw was found in the image parser of the Java AWT component. Insufficient validation of raster parameters could lead to Java Virtual Machine memory corruption, possibly allowing untrusted Java application or applet to execute arbitrary code with the virtual machine privileges. External Reference: <a href="http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html">http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html</a>
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/icedtea6 | <1.11.6 | 1.11.6 |
redhat/icedtea6 | <1.12.1 | 1.12.1 |
redhat/icedtea7 | <2.1.5 | 2.1.5 |
redhat/icedtea7 | <2.2.5 | 2.2.5 |
redhat/icedtea7 | <2.3.6 | 2.3.6 |
Oracle JRE | =1.7.0 | |
Oracle JRE | =1.7.0-update1 | |
Oracle JRE | =1.7.0-update10 | |
Oracle JRE | =1.7.0-update11 | |
Oracle JRE | =1.7.0-update2 | |
Oracle JRE | =1.7.0-update3 | |
Oracle JRE | =1.7.0-update4 | |
Oracle JRE | =1.7.0-update5 | |
Oracle JRE | =1.7.0-update6 | |
Oracle JRE | =1.7.0-update7 | |
Oracle JRE | =1.7.0-update9 | |
Oracle Java SE 7 | =1.7.0 | |
Oracle Java SE 7 | =1.7.0-update1 | |
Oracle Java SE 7 | =1.7.0-update10 | |
Oracle Java SE 7 | =1.7.0-update11 | |
Oracle Java SE 7 | =1.7.0-update2 | |
Oracle Java SE 7 | =1.7.0-update3 | |
Oracle Java SE 7 | =1.7.0-update4 | |
Oracle Java SE 7 | =1.7.0-update5 | |
Oracle Java SE 7 | =1.7.0-update6 | |
Oracle Java SE 7 | =1.7.0-update7 | |
Oracle Java SE 7 | =1.7.0-update9 | |
Oracle JRE | =1.6.0-update22 | |
Oracle JRE | =1.6.0-update23 | |
Oracle JRE | =1.6.0-update24 | |
Oracle JRE | =1.6.0-update25 | |
Oracle JRE | =1.6.0-update26 | |
Oracle JRE | =1.6.0-update27 | |
Oracle JRE | =1.6.0-update29 | |
Oracle JRE | =1.6.0-update30 | |
Oracle JRE | =1.6.0-update31 | |
Oracle JRE | =1.6.0-update32 | |
Oracle JRE | =1.6.0-update33 | |
Oracle JRE | =1.6.0-update34 | |
Oracle JRE | =1.6.0-update35 | |
Oracle JRE | =1.6.0-update37 | |
Oracle JRE | =1.6.0-update38 | |
Sun Java Runtime Environment (JRE) | =1.6.0 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_1 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_10 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_11 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_12 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_13 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_14 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_15 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_16 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_17 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_18 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_19 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_2 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_20 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_21 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_3 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_4 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_5 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_6 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_7 | |
Sun Java Runtime Environment (JRE) | =1.6.0-update_9 | |
Oracle Java SE 7 | =1.6.0-update22 | |
Oracle Java SE 7 | =1.6.0-update23 | |
Oracle Java SE 7 | =1.6.0-update24 | |
Oracle Java SE 7 | =1.6.0-update25 | |
Oracle Java SE 7 | =1.6.0-update26 | |
Oracle Java SE 7 | =1.6.0-update27 | |
Oracle Java SE 7 | =1.6.0-update29 | |
Oracle Java SE 7 | =1.6.0-update30 | |
Oracle Java SE 7 | =1.6.0-update31 | |
Oracle Java SE 7 | =1.6.0-update32 | |
Oracle Java SE 7 | =1.6.0-update33 | |
Oracle Java SE 7 | =1.6.0-update34 | |
Oracle Java SE 7 | =1.6.0-update35 | |
Oracle Java SE 7 | =1.6.0-update37 | |
Oracle Java SE 7 | =1.6.0-update38 | |
Java Development Kit (JDK) | =1.6.0 | |
Java Development Kit (JDK) | =1.6.0-update_10 | |
Java Development Kit (JDK) | =1.6.0-update_11 | |
Java Development Kit (JDK) | =1.6.0-update_12 | |
Java Development Kit (JDK) | =1.6.0-update_13 | |
Java Development Kit (JDK) | =1.6.0-update_14 | |
Java Development Kit (JDK) | =1.6.0-update_15 | |
Java Development Kit (JDK) | =1.6.0-update_16 | |
Java Development Kit (JDK) | =1.6.0-update_17 | |
Java Development Kit (JDK) | =1.6.0-update_18 | |
Java Development Kit (JDK) | =1.6.0-update_19 | |
Java Development Kit (JDK) | =1.6.0-update_20 | |
Java Development Kit (JDK) | =1.6.0-update_21 | |
Java Development Kit (JDK) | =1.6.0-update_3 | |
Java Development Kit (JDK) | =1.6.0-update_4 | |
Java Development Kit (JDK) | =1.6.0-update_5 | |
Java Development Kit (JDK) | =1.6.0-update_6 | |
Java Development Kit (JDK) | =1.6.0-update_7 | |
Java Development Kit (JDK) | =1.6.0-update1 | |
Java Development Kit (JDK) | =1.6.0-update1_b06 | |
Java Development Kit (JDK) | =1.6.0-update2 | |
Oracle JRE | =1.5.0-update36 | |
Oracle JRE | =1.5.0-update38 | |
Sun Java Runtime Environment (JRE) | =1.5.0 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update1 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update10 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update11 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update12 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update13 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update14 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update15 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update16 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update17 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update18 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update19 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update2 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update20 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update21 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update22 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update23 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update24 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update25 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update26 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update27 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update28 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update29 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update3 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update31 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update33 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update4 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update5 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update6 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update7 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update8 | |
Sun Java Runtime Environment (JRE) | =1.5.0-update9 | |
Oracle Java SE 7 | =1.5.0-update36 | |
Oracle Java SE 7 | =1.5.0-update38 | |
Java Development Kit (JDK) | =1.5.0 | |
Java Development Kit (JDK) | =1.5.0-update1 | |
Java Development Kit (JDK) | =1.5.0-update10 | |
Java Development Kit (JDK) | =1.5.0-update11 | |
Java Development Kit (JDK) | =1.5.0-update11_b03 | |
Java Development Kit (JDK) | =1.5.0-update12 | |
Java Development Kit (JDK) | =1.5.0-update13 | |
Java Development Kit (JDK) | =1.5.0-update14 | |
Java Development Kit (JDK) | =1.5.0-update15 | |
Java Development Kit (JDK) | =1.5.0-update16 | |
Java Development Kit (JDK) | =1.5.0-update17 | |
Java Development Kit (JDK) | =1.5.0-update18 | |
Java Development Kit (JDK) | =1.5.0-update19 | |
Java Development Kit (JDK) | =1.5.0-update2 | |
Java Development Kit (JDK) | =1.5.0-update20 | |
Java Development Kit (JDK) | =1.5.0-update21 | |
Java Development Kit (JDK) | =1.5.0-update22 | |
Java Development Kit (JDK) | =1.5.0-update23 | |
Java Development Kit (JDK) | =1.5.0-update24 | |
Java Development Kit (JDK) | =1.5.0-update25 | |
Java Development Kit (JDK) | =1.5.0-update26 | |
Java Development Kit (JDK) | =1.5.0-update27 | |
Java Development Kit (JDK) | =1.5.0-update28 | |
Java Development Kit (JDK) | =1.5.0-update29 | |
Java Development Kit (JDK) | =1.5.0-update3 | |
Java Development Kit (JDK) | =1.5.0-update31 | |
Java Development Kit (JDK) | =1.5.0-update33 | |
Java Development Kit (JDK) | =1.5.0-update4 | |
Java Development Kit (JDK) | =1.5.0-update5 | |
Java Development Kit (JDK) | =1.5.0-update6 | |
Java Development Kit (JDK) | =1.5.0-update7 | |
Java Development Kit (JDK) | =1.5.0-update7_b03 | |
Java Development Kit (JDK) | =1.5.0-update8 | |
Java Development Kit (JDK) | =1.5.0-update9 | |
Oracle JRE | <=1.4.2_40 | |
Oracle JRE | =1.4.2_38 | |
Sun Java Runtime Environment (JRE) | =1.4.2 | |
Sun Java Runtime Environment (JRE) | =1.4.2_1 | |
Sun Java Runtime Environment (JRE) | =1.4.2_2 | |
Sun Java Runtime Environment (JRE) | =1.4.2_3 | |
Sun Java Runtime Environment (JRE) | =1.4.2_4 | |
Sun Java Runtime Environment (JRE) | =1.4.2_5 | |
Sun Java Runtime Environment (JRE) | =1.4.2_6 | |
Sun Java Runtime Environment (JRE) | =1.4.2_7 | |
Sun Java Runtime Environment (JRE) | =1.4.2_8 | |
Sun Java Runtime Environment (JRE) | =1.4.2_9 | |
Sun Java Runtime Environment (JRE) | =1.4.2_10 | |
Sun Java Runtime Environment (JRE) | =1.4.2_11 | |
Sun Java Runtime Environment (JRE) | =1.4.2_12 | |
Sun Java Runtime Environment (JRE) | =1.4.2_13 | |
Sun Java Runtime Environment (JRE) | =1.4.2_14 | |
Sun Java Runtime Environment (JRE) | =1.4.2_15 | |
Sun Java Runtime Environment (JRE) | =1.4.2_16 | |
Sun Java Runtime Environment (JRE) | =1.4.2_17 | |
Sun Java Runtime Environment (JRE) | =1.4.2_18 | |
Sun Java Runtime Environment (JRE) | =1.4.2_19 | |
Sun Java Runtime Environment (JRE) | =1.4.2_20 | |
Sun Java Runtime Environment (JRE) | =1.4.2_21 | |
Sun Java Runtime Environment (JRE) | =1.4.2_22 | |
Sun Java Runtime Environment (JRE) | =1.4.2_23 | |
Sun Java Runtime Environment (JRE) | =1.4.2_24 | |
Sun Java Runtime Environment (JRE) | =1.4.2_25 | |
Sun Java Runtime Environment (JRE) | =1.4.2_26 | |
Sun Java Runtime Environment (JRE) | =1.4.2_27 | |
Sun Java Runtime Environment (JRE) | =1.4.2_28 | |
Sun Java Runtime Environment (JRE) | =1.4.2_29 | |
Sun Java Runtime Environment (JRE) | =1.4.2_30 | |
Sun Java Runtime Environment (JRE) | =1.4.2_31 | |
Sun Java Runtime Environment (JRE) | =1.4.2_32 | |
Sun Java Runtime Environment (JRE) | =1.4.2_33 | |
Sun Java Runtime Environment (JRE) | =1.4.2_34 | |
Sun Java Runtime Environment (JRE) | =1.4.2_35 | |
Sun Java Runtime Environment (JRE) | =1.4.2_36 | |
Sun Java Runtime Environment (JRE) | =1.4.2_37 | |
Oracle Java SE 7 | <=1.4.2_40 | |
Oracle Java SE 7 | =1.4.2_38 | |
Java Development Kit (JDK) | =1.4.2 | |
Java Development Kit (JDK) | =1.4.2_1 | |
Java Development Kit (JDK) | =1.4.2_2 | |
Java Development Kit (JDK) | =1.4.2_3 | |
Java Development Kit (JDK) | =1.4.2_4 | |
Java Development Kit (JDK) | =1.4.2_5 | |
Java Development Kit (JDK) | =1.4.2_6 | |
Java Development Kit (JDK) | =1.4.2_7 | |
Java Development Kit (JDK) | =1.4.2_8 | |
Java Development Kit (JDK) | =1.4.2_9 | |
Java Development Kit (JDK) | =1.4.2_10 | |
Java Development Kit (JDK) | =1.4.2_11 | |
Java Development Kit (JDK) | =1.4.2_12 | |
Java Development Kit (JDK) | =1.4.2_13 | |
Java Development Kit (JDK) | =1.4.2_14 | |
Java Development Kit (JDK) | =1.4.2_15 | |
Java Development Kit (JDK) | =1.4.2_16 | |
Java Development Kit (JDK) | =1.4.2_17 | |
Java Development Kit (JDK) | =1.4.2_18 | |
Java Development Kit (JDK) | =1.4.2_19 | |
Java Development Kit (JDK) | =1.4.2_22 | |
Java Development Kit (JDK) | =1.4.2_23 | |
Java Development Kit (JDK) | =1.4.2_25 | |
Java Development Kit (JDK) | =1.4.2_26 | |
Java Development Kit (JDK) | =1.4.2_27 | |
Java Development Kit (JDK) | =1.4.2_28 | |
Java Development Kit (JDK) | =1.4.2_29 | |
Java Development Kit (JDK) | =1.4.2_30 | |
Java Development Kit (JDK) | =1.4.2_31 | |
Java Development Kit (JDK) | =1.4.2_32 | |
Java Development Kit (JDK) | =1.4.2_33 | |
Java Development Kit (JDK) | =1.4.2_34 | |
Java Development Kit (JDK) | =1.4.2_35 | |
Java Development Kit (JDK) | =1.4.2_36 | |
Java Development Kit (JDK) | =1.4.2_37 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-1480 has a high severity rating due to the potential for remote code execution resulting from memory corruption.
To fix CVE-2013-1480, update to the recommended versions of IcedTea as specified in the vendor's security advisory.
CVE-2013-1480 affects multiple versions of Oracle JDK and JRE as well as IcedTea packages.
Exploitation of CVE-2013-1480 could enable an untrusted Java application or applet to execute arbitrary code in the context of the Java Virtual Machine.
As of now, there are no widely known public exploits for CVE-2013-1480, but the vulnerability is still deemed serious.