CVE-2013-5849: Medium severity oracle jre vulnerability
It was discovered that DataFlavor class in the AWT component of OpenJDK failed to perform security checks properly. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions because of insufficient checks of package access restrictions, or class loader access permission.
http://docs.oracle.com/javase/7/docs/api/java/awt/datatransfer/DataFlavor.html
Other sources
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5849?
CVE-2013-5849 has been classified as a high-severity vulnerability due to its potential to bypass Java sandbox restrictions.
How do I fix CVE-2013-5849?
To fix CVE-2013-5849, update your Java installation to the latest version or apply available patches provided by your vendor.
What systems are affected by CVE-2013-5849?
CVE-2013-5849 affects various versions of Oracle JDK, Oracle JRE, and IcedTea, particularly older versions prior to their security patches.
Is there a workaround for CVE-2013-5849?
A recommended workaround for CVE-2013-5849 is to disable Java in your browser until the system can be updated.
What type of vulnerability is CVE-2013-5849?
CVE-2013-5849 is a security vulnerability that allows untrusted Java applications or applets to bypass security restrictions related to package access.