CVE-2013-1490: Medium severity Oracle JDK vulnerability
Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.011-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431. NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors. NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1490?
CVE-2013-1490 is considered a critical vulnerability that allows attackers to bypass the Java security sandbox.
How do I fix CVE-2013-1490?
To fix CVE-2013-1490, users should update their Oracle Java SE to the latest version.
Which versions of Java are affected by CVE-2013-1490?
CVE-2013-1490 specifically affects Oracle JDK and JRE versions 1.7.0 Update 11.
What kind of attacks can exploit CVE-2013-1490?
CVE-2013-1490 can be exploited by user-assisted remote attackers to execute arbitrary code.
Is CVE-2013-1490 still a risk if I am using newer versions of Java?
If you are using versions of Java released after Update 11, CVE-2013-1490 should not be a risk, but users should ensure they are fully up-to-date.