CVE-2013-1489
N/A
N/A
Summary
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15906
- http://seclists.org/fulldisclosure/2013/Jan/241
- http://www.us-cert.gov/cas/techalerts/TA13-032A.html
- http://www.zdnet.com/java-update-doesnt-prevent-silent-exploits-at-all-7000010422/
- http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/
- http://www.kb.cert.org/vuls/id/858729
- http://www.scmagazine.com.au/News/330453%2Cjava-still-unsafe-new-flaws-discovered.aspx
- http://rhn.redhat.com/errata/RHSA-2013-0237.html
- http://marc.info/?l=bugtraq&m=136439120408139&w=2
- http://marc.info/?l=bugtraq&m=136733161405818&w=2
- http://marc.info/?l=bugtraq&m=136439120408139&w=2
- http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
- http://www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150
- http://marc.info/?l=bugtraq&m=136733161405818&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19171
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15906
- http://seclists.org/fulldisclosure/2013/Jan/241
- http://www.us-cert.gov/cas/techalerts/TA13-032A.html
- http://www.zdnet.com/java-update-doesnt-prevent-silent-exploits-at-all-7000010422/
- http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/
- http://www.kb.cert.org/vuls/id/858729
- http://www.scmagazine.com.au/News/330453%2Cjava-still-unsafe-new-flaws-discovered.aspx
- http://rhn.redhat.com/errata/RHSA-2013-0237.html
- http://marc.info/?l=bugtraq&m=136439120408139&w=2
- http://marc.info/?l=bugtraq&m=136733161405818&w=2
- http://marc.info/?l=bugtraq&m=136439120408139&w=2
- http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
- http://www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150
- http://marc.info/?l=bugtraq&m=136733161405818&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19171
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.