Podatność CVE-2013-2384

Podatność CVE-2013-2384

Publikacja: 2013-04-17 Modyfikacja: 2013-04-18

Opis:

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

	Tytuł	Autor	Data
High	Apple iTunes 11.2.2 Insecure Libraries	Stefan Kanthak	08.07.2014
High	iTunes 11.2.2 for Windows: completely outdated and vulnerable 3rd party libraries	Stefan Kanthak	09.07.2014

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
10/10	10/10	10/10

Wymagany dostęp	Złożoność ataku	Autoryzacja
Zdalny	Niska	Nie wymagana
Wpływ na poufność	Wpływ na integralność	Wpływ na dostępność
Pełny	Pełny	Pełny

Affected software
SUN -> JDK
SUN -> JRE
Oracle -> JDK
Oracle -> JRE

Referencje:

http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/

http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/

http://bugs.icu-project.org/trac/ticket/10107

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880

http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7

http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html

http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html

http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html

http://marc.info/?l=bugtraq&m=137283787217316&w=2

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16549

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19341

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19549

http://rhn.redhat.com/errata/RHSA-2013-0752.html

http://rhn.redhat.com/errata/RHSA-2013-0757.html

http://rhn.redhat.com/errata/RHSA-2013-0758.html

http://rhn.redhat.com/errata/RHSA-2013-1455.html

http://rhn.redhat.com/errata/RHSA-2013-1456.html

http://security.gentoo.org/glsa/glsa-201406-32.xml

http://site.icu-project.org/download/51#TOC-Known-Issues

http://www.mandriva.com/security/advisories?name=MDVSA-2013:145

http://www.mandriva.com/security/advisories?name=MDVSA-2013:161

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html

http://www.securityfocus.com/bid/59179

http://www.ubuntu.com/usn/USN-1806-1

http://www.us-cert.gov/ncas/alerts/TA13-107A

https://bugzilla.redhat.com/show_bug.cgi?id=952709

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130

Podatność CVE-2013-2384

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

High

Apple iTunes 11.2.2 Insecure Libraries

High

iTunes 11.2.2 for Windows: completely outdated and vulnerable 3rd party libraries

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

10/10

10/10

10/10

Zdalny

Niska

Nie wymagana

Pełny

Pełny

Pełny

Affected software

Referencje: