CVE-2013-5784: Medium severity oracle jre vulnerability
It was discovered that InterfaceImplementor class in the Scripting component of OpenJDK failed to perform security checks properly. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions because of insufficient checks of interface access level modifiers, package restrictions, or instance class loader.
The fix also marks the com.sun.script. package restricted by adding it to the package.access properly list in the java.security file.
Other sources
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5784?
CVE-2013-5784 is classified as a high severity vulnerability due to its potential to bypass Java sandbox restrictions.
How do I fix CVE-2013-5784?
To fix CVE-2013-5784, update to the latest version of the affected Java Runtime Environment or Development Kit.
Which software is affected by CVE-2013-5784?
CVE-2013-5784 affects various versions of Oracle JRE and JDK, as well as specific versions of the IcedTea package.
Can CVE-2013-5784 be exploited remotely?
Yes, CVE-2013-5784 can be exploited remotely by malicious Java applications or applets.
What are the potential impacts of CVE-2013-5784?
The potential impacts of CVE-2013-5784 include unauthorized access to restricted system resources.