First published: Fri Jul 12 2013(Updated: )
Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3012.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/java | <1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9 | 1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9 |
redhat/java | <1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9 | 1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9 |
redhat/java | <1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9 | 1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9 |
redhat/java | <1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4 | 1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4 |
redhat/java | <1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4 | 1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4 |
redhat/java | <1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4 | 1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4 |
IBM JDK | =5.0.0.0 | |
IBM JDK | =5.0.11.0 | |
IBM JDK | =5.0.11.1 | |
IBM JDK | =5.0.11.2 | |
IBM JDK | =5.0.12.0 | |
IBM JDK | =5.0.12.1 | |
IBM JDK | =5.0.12.2 | |
IBM JDK | =5.0.12.3 | |
IBM JDK | =5.0.12.4 | |
IBM JDK | =5.0.12.5 | |
IBM JDK | =5.0.13.0 | |
IBM JDK | =5.0.14.0 | |
IBM JDK | =5.0.15.0 | |
IBM JDK | =5.0.16.0 | |
IBM JDK | =5.0.16.1 | |
IBM JDK | =5.0.16.2 | |
IBM JDK | =6.0.0.0 | |
IBM JDK | =6.0.1.0 | |
IBM JDK | =6.0.2.0 | |
IBM JDK | =6.0.3.0 | |
IBM JDK | =6.0.4.0 | |
IBM JDK | =6.0.5.0 | |
IBM JDK | =6.0.6.0 | |
IBM JDK | =6.0.7.0 | |
IBM JDK | =6.0.8.0 | |
IBM JDK | =6.0.8.1 | |
IBM JDK | =6.0.9.0 | |
IBM JDK | =6.0.9.1 | |
IBM JDK | =6.0.9.2 | |
IBM JDK | =6.0.10.0 | |
IBM JDK | =6.0.10.1 | |
IBM JDK | =6.0.11.0 | |
IBM JDK | =6.0.12.0 | |
IBM JDK | =6.0.13.0 | |
IBM JDK | =6.0.13.1 | |
IBM JDK | =6.0.13.2 | |
IBM JDK | =7.0.0.0 | |
IBM JDK | =7.0.1.0 | |
IBM JDK | =7.0.2.0 | |
IBM JDK | =7.0.3.0 | |
IBM JDK | =7.0.4.0 | |
IBM JDK | =7.0.4.1 | |
IBM JDK | =7.0.4.2 | |
IBM JDK | =1.4.2 | |
IBM JDK | =1.4.2.13 | |
IBM JDK | =1.4.2.13.1 | |
IBM JDK | =1.4.2.13.2 | |
IBM JDK | =1.4.2.13.3 | |
IBM JDK | =1.4.2.13.4 | |
IBM JDK | =1.4.2.13.5 | |
IBM JDK | =1.4.2.13.6 | |
IBM JDK | =1.4.2.13.7 | |
IBM JDK | =1.4.2.13.8 | |
IBM JDK | =1.4.2.13.9 | |
IBM JDK | =1.4.2.13.10 | |
IBM JDK | =1.4.2.13.11 | |
IBM JDK | =1.4.2.13.12 | |
IBM JDK | =1.4.2.13.13 | |
IBM JDK | =1.4.2.13.14 | |
IBM JDK | =1.4.2.13.15 | |
IBM JDK | =1.4.2.13.16 | |
IBM JDK | =1.4.2.13.17 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
CVE-2013-3011 has been classified as a critical vulnerability.
To fix CVE-2013-3011, update the Java Runtime Environment to the relevant patched versions provided by IBM or Red Hat.
CVE-2013-3011 affects multiple versions of IBM Java including 1.4.2, 5.0, 6, and 7.
Yes, CVE-2013-3011 allows remote attackers to affect the confidentiality, availability, and integrity of the system.
While specific exploit details are not disclosed, the vulnerability is serious enough to warrant immediate updates to vulnerable systems.