CVE-2013-2414: Critical severity ORACLE JRE vulnerability

Q: What is the severity of CVE-2013-2414?

CVE-2013-2414 is classified as a high severity vulnerability affecting the Java Runtime Environment.

Q: How do I fix CVE-2013-2414?

To fix CVE-2013-2414, update the Java Runtime Environment to a version later than Java SE 7 Update 17.

Q: Who does CVE-2013-2414 affect?

CVE-2013-2414 affects users running Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier.

Q: What types of issues can CVE-2013-2414 cause?

CVE-2013-2414 can potentially lead to breaches in confidentiality, integrity, and availability of affected systems.

Q: Is CVE-2013-2414 related to any other vulnerabilities?

CVE-2013-2414 is noted as a different vulnerability than CVE-2013-1493, addressing issues specifically in JavaFX.

Published Apr 17, 2013

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2427, and CVE-2013-2428.

Affected Software

37 affected components

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update13

ORACLE JRE=1.7.0-update15

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update13

Oracle JDK=1.7.0-update15

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JavaFX<=2.2.7

ORACLE JavaFX=2.0

ORACLE JavaFX=2.0.2

ORACLE JavaFX=2.0.3

ORACLE JavaFX=2.1

ORACLE JavaFX=2.2

ORACLE JavaFX=2.2.3

ORACLE JavaFX=2.2.4

ORACLE JavaFX=2.2.5

Event History

Apr 17, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-2414?

CVE-2013-2414 is classified as a high severity vulnerability affecting the Java Runtime Environment.

How do I fix CVE-2013-2414?

To fix CVE-2013-2414, update the Java Runtime Environment to a version later than Java SE 7 Update 17.

Who does CVE-2013-2414 affect?

CVE-2013-2414 affects users running Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier.

What types of issues can CVE-2013-2414 cause?

CVE-2013-2414 can potentially lead to breaches in confidentiality, integrity, and availability of affected systems.

Is CVE-2013-2414 related to any other vulnerabilities?