Vulnerability CVE-2013-5849

Vulnerability CVE-2013-5849

Published: 2013-10-16 Modified: 2013-10-21

Description:

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:N/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
4.3/10	2.9/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	None	None

Affected software
SUN -> JDK
SUN -> JRE
Oracle -> JDK
Oracle -> JRE

References:

http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html

http://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html

http://marc.info/?l=bugtraq&m=138674031212883&w=2

http://marc.info/?l=bugtraq&m=138674073720143&w=2

http://rhn.redhat.com/errata/RHSA-2013-1440.html

http://rhn.redhat.com/errata/RHSA-2013-1447.html

http://rhn.redhat.com/errata/RHSA-2013-1451.html

http://rhn.redhat.com/errata/RHSA-2013-1505.html

http://rhn.redhat.com/errata/RHSA-2013-1507.html

http://rhn.redhat.com/errata/RHSA-2013-1508.html

http://rhn.redhat.com/errata/RHSA-2013-1509.html

http://rhn.redhat.com/errata/RHSA-2013-1793.html

http://security.gentoo.org/glsa/glsa-201406-32.xml

http://support.apple.com/kb/HT5982

http://www-01.ibm.com/support/docview.wss?uid=swg21655201

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.html

http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

http://www.securityfocus.com/bid/63106

http://www.ubuntu.com/usn/USN-2033-1

http://www.ubuntu.com/usn/USN-2089-1

https://access.redhat.com/errata/RHSA-2014:0414

https://bugzilla.redhat.com/show_bug.cgi?id=1018750

https://exchange.xforce.ibmcloud.com/vulnerabilities/88003

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18971

Vulnerability CVE-2013-5849

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.

CWE-noinfo

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:N/A:N)

4.3/10

2.9/10

8.6/10

Remote

Medium

No required

Partial

None

None

Affected software

References: