CVE-2013-2427: Critical severity ORACLE JRE vulnerability

Q: What is the severity of CVE-2013-2427?

The severity of CVE-2013-2427 is considered critical due to its potential impact on confidentiality, integrity, and availability.

Q: How do I fix CVE-2013-2427?

To fix CVE-2013-2427, update your Oracle Java SE to a version later than Update 17.

Q: What software is affected by CVE-2013-2427?

CVE-2013-2427 affects Oracle Java SE 7 Update 17 and earlier, as well as Oracle JavaFX 2.2.7 and earlier.

Q: What types of vulnerabilities does CVE-2013-2427 relate to?

CVE-2013-2427 relates to unspecified vulnerabilities that could allow remote attackers various intrusion methods.

Q: Is CVE-2013-2427 a different vulnerability from CVE-2013-??

Yes, CVE-2013-2427 is a different vulnerability than other CVEs, and it pertains specifically to the JavaFX component.

Published Apr 17, 2013

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2428.

Affected Software

37 affected components

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update13

ORACLE JRE=1.7.0-update15

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update13

Oracle JDK=1.7.0-update15

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JavaFX<=2.2.7

ORACLE JavaFX=2.0

ORACLE JavaFX=2.0.2

ORACLE JavaFX=2.0.3

ORACLE JavaFX=2.1

ORACLE JavaFX=2.2

ORACLE JavaFX=2.2.3

ORACLE JavaFX=2.2.4

ORACLE JavaFX=2.2.5

Event History

Apr 17, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-2427?

The severity of CVE-2013-2427 is considered critical due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2013-2427?

To fix CVE-2013-2427, update your Oracle Java SE to a version later than Update 17.

What software is affected by CVE-2013-2427?

CVE-2013-2427 affects Oracle Java SE 7 Update 17 and earlier, as well as Oracle JavaFX 2.2.7 and earlier.

What types of vulnerabilities does CVE-2013-2427 relate to?

CVE-2013-2427 relates to unspecified vulnerabilities that could allow remote attackers various intrusion methods.

Is CVE-2013-2427 a different vulnerability from CVE-2013-??