CVE-2013-2434: Critical severity ORACLE JRE vulnerability

Q: What is the severity of CVE-2013-2434?

CVE-2013-2434 is classified as a high severity vulnerability affecting confidentiality, integrity, and availability within the Java Runtime Environment.

Q: How do I fix CVE-2013-2434?

The fix for CVE-2013-2434 is to upgrade to a later version of Oracle Java SE or JavaFX that is not affected by this vulnerability.

Q: What software versions are affected by CVE-2013-2434?

CVE-2013-2434 affects Oracle Java SE 7 Update 17 and earlier, as well as JavaFX 2.2.7 and earlier versions.

Q: Can CVE-2013-2434 be exploited remotely?

Yes, CVE-2013-2434 can be exploited remotely by attackers due to unspecified vectors related to the 2D component.

Q: Is user action required to mitigate CVE-2013-2434?

Yes, users must take action by updating their Java Runtime Environment or JavaFX installations to mitigate CVE-2013-2434.

Published Apr 17, 2013

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Affected Software

37 affected components

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update11

ORACLE JRE=1.7.0-update13

ORACLE JRE=1.7.0-update15

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update11

Oracle JDK=1.7.0-update13

Oracle JDK=1.7.0-update15

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JavaFX<=2.2.7

ORACLE JavaFX=2.0

ORACLE JavaFX=2.0.2

ORACLE JavaFX=2.0.3

ORACLE JavaFX=2.1

ORACLE JavaFX=2.2

ORACLE JavaFX=2.2.3

ORACLE JavaFX=2.2.4

ORACLE JavaFX=2.2.5

Event History

Apr 17, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-2434?

CVE-2013-2434 is classified as a high severity vulnerability affecting confidentiality, integrity, and availability within the Java Runtime Environment.

How do I fix CVE-2013-2434?

The fix for CVE-2013-2434 is to upgrade to a later version of Oracle Java SE or JavaFX that is not affected by this vulnerability.

What software versions are affected by CVE-2013-2434?

CVE-2013-2434 affects Oracle Java SE 7 Update 17 and earlier, as well as JavaFX 2.2.7 and earlier versions.

Can CVE-2013-2434 be exploited remotely?

Yes, CVE-2013-2434 can be exploited remotely by attackers due to unspecified vectors related to the 2D component.

Is user action required to mitigate CVE-2013-2434?