CVE-2013-1561: Medium severity ORACLE JRE vulnerability

Q: What is the severity of CVE-2013-1561?

CVE-2013-1561 is rated as a critical vulnerability that allows remote attackers to impact confidentiality.

Q: How do I fix CVE-2013-1561?

To fix CVE-2013-1561, update your Java Runtime Environment to version 7 Update 21 or later.

Q: What software is affected by CVE-2013-1561?

CVE-2013-1561 affects Oracle Java SE 7 Update 17 and earlier, as well as JavaFX 2.2.7 and earlier versions.

Q: What are the potential risks associated with CVE-2013-1561?

The risks include the possibility of remote attackers exploiting the vulnerability to gain access to confidential information.

Q: Is CVE-2013-1561 still a threat in current software versions?

No, CVE-2013-1561 is not a threat in versions of Java that have been updated past the vulnerable releases.

Published Apr 17, 2013

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.

Affected Software

37 affected components

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update13

ORACLE JRE=1.7.0-update15

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update13

Oracle JDK=1.7.0-update15

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JavaFX<=2.2.7

ORACLE JavaFX=2.0

ORACLE JavaFX=2.0.2

ORACLE JavaFX=2.0.3

ORACLE JavaFX=2.1

ORACLE JavaFX=2.2

ORACLE JavaFX=2.2.3

ORACLE JavaFX=2.2.4

ORACLE JavaFX=2.2.5

Event History

Apr 17, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1561?

CVE-2013-1561 is rated as a critical vulnerability that allows remote attackers to impact confidentiality.

How do I fix CVE-2013-1561?

To fix CVE-2013-1561, update your Java Runtime Environment to version 7 Update 21 or later.

What software is affected by CVE-2013-1561?

CVE-2013-1561 affects Oracle Java SE 7 Update 17 and earlier, as well as JavaFX 2.2.7 and earlier versions.

What are the potential risks associated with CVE-2013-1561?

The risks include the possibility of remote attackers exploiting the vulnerability to gain access to confidential information.

Is CVE-2013-1561 still a threat in current software versions?