CVE-2013-5893: Critical severity oracle java se 7 vulnerability
It was discovered that the HotSpot JVM in OpenJDK did not properly handle methods in MethodHandles. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5893?
CVE-2013-5893 is considered to be a high severity vulnerability due to its potential to bypass Java sandbox restrictions.
How do I fix CVE-2013-5893?
To fix CVE-2013-5893, update to an unaffected version of OpenJDK or Oracle Java SE beyond version 7u45.
What software is affected by CVE-2013-5893?
CVE-2013-5893 affects Oracle Java SE 7u45, OpenJDK 7, and specific versions of IcedTea.
Can CVE-2013-5893 be exploited remotely?
Yes, CVE-2013-5893 may allow remote attackers to exploit the vulnerability through untrusted Java applications or applets.
What components of the Java environment are impacted by CVE-2013-5893?
CVE-2013-5893 impacts the HotSpot JVM and specifically the handling of methods in MethodHandles.