CVE-2013-5884: Medium severity oracle jre vulnerability
It was discovered that the CORBA stub factories did not properly check code permissions. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5884?
CVE-2013-5884 has been classified as a medium severity vulnerability due to the potential for untrusted applications to bypass Java sandbox restrictions.
How do I fix CVE-2013-5884?
To fix CVE-2013-5884, update your Java installation to a version that is not affected, specifically versions 1.7.0-update51 or later.
What types of applications are affected by CVE-2013-5884?
CVE-2013-5884 affects untrusted Java applications or applets that utilize CORBA stub factories.
Which versions of Oracle Java are impacted by CVE-2013-5884?
CVE-2013-5884 impacts Oracle Java SE versions 5.0u55, 6u65, and 7u45, as well as Java SE Embedded 7u45.
What can happen if I do not address CVE-2013-5884?
Failure to address CVE-2013-5884 may allow malicious Java applications to execute arbitrary code and compromise the security of the user’s system.