CVE-2013-2418: Medium severity ORACLE JRE vulnerability

Q: What is the severity of CVE-2013-2418?

CVE-2013-2418 is classified as a moderate severity vulnerability in the Java Runtime Environment.

Q: How do I fix CVE-2013-2418?

To mitigate CVE-2013-2418, users should upgrade to the latest version of Oracle Java SE.

Q: Who is affected by CVE-2013-2418?

CVE-2013-2418 affects all users running Oracle Java SE 7 Update 17 and earlier or Java SE 6 Update 43 and earlier.

Q: What components are involved in CVE-2013-2418?

CVE-2013-2418 involves the Java Runtime Environment (JRE) component related to Deployment.

Q: What types of attacks can CVE-2013-2418 lead to?

CVE-2013-2418 can potentially affect the confidentiality, integrity, and availability of the affected systems.

Published Apr 17, 2013

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected Software

106 affected components

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update13

ORACLE JRE=1.7.0-update15

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update13

Oracle JDK=1.7.0-update15

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JRE<=1.6.0

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

ORACLE JRE=1.6.0-update30

ORACLE JRE=1.6.0-update31

ORACLE JRE=1.6.0-update32

ORACLE JRE=1.6.0-update33

ORACLE JRE=1.6.0-update34

ORACLE JRE=1.6.0-update35

ORACLE JRE=1.6.0-update37

ORACLE JRE=1.6.0-update38

ORACLE JRE=1.6.0-update39

ORACLE JRE=1.6.0-update41

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

Sun JRE=1.6.0-update_9

Oracle JDK<=1.6.0

Oracle JDK=1.6.0-update22

Oracle JDK=1.6.0-update23

Oracle JDK=1.6.0-update24

Oracle JDK=1.6.0-update25

Oracle JDK=1.6.0-update26

Oracle JDK=1.6.0-update27

Oracle JDK=1.6.0-update29

Oracle JDK=1.6.0-update30

Oracle JDK=1.6.0-update31

Oracle JDK=1.6.0-update32

Oracle JDK=1.6.0-update33

Oracle JDK=1.6.0-update34

Oracle JDK=1.6.0-update35

Oracle JDK=1.6.0-update37

Oracle JDK=1.6.0-update38

Oracle JDK=1.6.0-update39

Oracle JDK=1.6.0-update41

Sun JDK=1.6.0

Sun JDK=1.6.0-update_10

Sun JDK=1.6.0-update_11

Sun JDK=1.6.0-update_12

Sun JDK=1.6.0-update_13

Sun JDK=1.6.0-update_14

Sun JDK=1.6.0-update_15

Sun JDK=1.6.0-update_16

Sun JDK=1.6.0-update_17

Sun JDK=1.6.0-update_18

Sun JDK=1.6.0-update_19

Sun JDK=1.6.0-update_20

Sun JDK=1.6.0-update_21

Sun JDK=1.6.0-update_3

Sun JDK=1.6.0-update_4

Sun JDK=1.6.0-update_5

Sun JDK=1.6.0-update_6

Sun JDK=1.6.0-update_7

Sun JDK=1.6.0-update1

Sun JDK=1.6.0-update1_b06

Sun JDK=1.6.0-update2

Event History

Apr 17, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-2418?

CVE-2013-2418 is classified as a moderate severity vulnerability in the Java Runtime Environment.

How do I fix CVE-2013-2418?

To mitigate CVE-2013-2418, users should upgrade to the latest version of Oracle Java SE.

Who is affected by CVE-2013-2418?