First published: Fri Jul 12 2013(Updated: )
Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/java | <1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9 | 1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9 |
redhat/java | <1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4 | 1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4 |
IBM JDK | =6.0.1.0 | |
IBM JDK | =7.0.0.0 | |
IBM JDK | =7.0.1.0 | |
IBM JDK | =7.0.2.0 | |
IBM JDK | =7.0.3.0 | |
IBM JDK | =7.0.4.0 | |
IBM JDK | =7.0.4.1 | |
IBM JDK | =7.0.4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-3007 has a severity rating that suggests it can affect confidentiality, integrity, and availability.
CVE-2013-3007 affects IBM Java versions 6.0.1 before SR6 and 7.0.0.0 to 7.0.4.2.
To fix CVE-2013-3007, upgrade to IBM Java 6.0.1 SR6 or IBM Java 7 SR5 or higher.
Yes, CVE-2013-3007 allows remote attackers to exploit the vulnerability through unspecified vectors.
The potential impacts of CVE-2013-3007 include unauthorized access to sensitive information, service disruptions, and data integrity issues.