CVE-2013-2458: Medium severity ORACLE JRE vulnerability
It was discovered that an error related to method handles exists in the Libraries component. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions.
Other sources
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via "an error related to method handles."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2458?
CVE-2013-2458 has been classified with a high severity level due to its potential to allow untrusted Java applications to bypass sandbox restrictions.
How do I fix CVE-2013-2458?
To remediate CVE-2013-2458, it is recommended to update to a patched version of Oracle Java SE or JDK that addresses this vulnerability.
What types of Java versions are affected by CVE-2013-2458?
CVE-2013-2458 affects Oracle Java SE 7 up to and including update 21, as well as various subsequent updates for JDK and JRE.
Can CVE-2013-2458 be exploited remotely?
Yes, CVE-2013-2458 can be exploited by an untrusted Java application or applet remotely, making it a critical concern for users.
What are the implications of CVE-2013-2458 for application security?
The implications of CVE-2013-2458 include the potential for unauthorized access and control of systems running vulnerable versions of Java.