CVE-2013-5820: Medium severity oracle java se 7 vulnerability
It was discovered that the JAXWS component of OpenJDK failed to perform security checks properly. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions because of insufficient checks when invoking object methods, or because of insufficient object type checks.
Other sources
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5820?
CVE-2013-5820 has been classified with a medium severity rating due to the potential for untrusted Java applications to bypass security checks.
How do I fix CVE-2013-5820?
To fix CVE-2013-5820, you should update OpenJDK to versions 2.4.3 or later for the IcedTea package, or upgrade to the latest versions of Oracle JDK and JRE.
Which software is affected by CVE-2013-5820?
CVE-2013-5820 affects multiple versions of OpenJDK, Oracle JDK, and Oracle JRE including specific updates of IcedTea up to version 2.4.3.
What are the potential impacts of CVE-2013-5820?
The potential impact of CVE-2013-5820 includes unauthorized access to restricted resources within Java applications due to insufficient sandbox protection.
Is CVE-2013-5820 associated with any specific Java versions?
Yes, CVE-2013-5820 affects various versions of Oracle JDK, particularly 1.6.0 and 1.7.0, up to update 45.