CVEvulnerability
CVE-2013-0426
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-02-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions.
Affected configurations
• oracle jre 1.7.0
• oracle jdk 1.7.0
• oracle jre 1.6.0
• sun jre 1.6.0
• oracle jdk 1.6.0
• sun jdk 1.6.0
• oracle jre 1.5.0
• sun jre 1.5.0
• oracle jdk 1.5.0
• sun jdk 1.5.0
• oracle jre (<= 1.4.2 40)
• oracle jre 1.4.2 38
• sun jre 1.4.2
• sun jre 1.4.2 1
• sun jre 1.4.2 2
• sun jre 1.4.2 3
• sun jre 1.4.2 4
• sun jre 1.4.2 5
• sun jre 1.4.2 6
• sun jre 1.4.2 7
• sun jre 1.4.2 8
• sun jre 1.4.2 9
• sun jre 1.4.2 10
• sun jre 1.4.2 11
• sun jre 1.4.2 12
• sun jre 1.4.2 13
• sun jre 1.4.2 14
• sun jre 1.4.2 15
• sun jre 1.4.2 16
• sun jre 1.4.2 17
• sun jre 1.4.2 18
• sun jre 1.4.2 19
• sun jre 1.4.2 20
• sun jre 1.4.2 21
• sun jre 1.4.2 22
• sun jre 1.4.2 23
• sun jre 1.4.2 24
• sun jre 1.4.2 25
• sun jre 1.4.2 26
• sun jre 1.4.2 27
• sun jre 1.4.2 28
• sun jre 1.4.2 29
• sun jre 1.4.2 30
• sun jre 1.4.2 31
• sun jre 1.4.2 32
• sun jre 1.4.2 33
• sun jre 1.4.2 34
• sun jre 1.4.2 35
• sun jre 1.4.2 36
• sun jre 1.4.2 37
• oracle jdk (<= 1.4.2 40)
• oracle jdk 1.4.2 38
• sun jdk 1.4.2
• sun jdk 1.4.2 1
• sun jdk 1.4.2 2
• sun jdk 1.4.2 3
• sun jdk 1.4.2 4
• sun jdk 1.4.2 5
• sun jdk 1.4.2 6
• sun jdk 1.4.2 7
… and 27 more
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907346 bugzilla.redhat.com
- http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS icedtea.classpath.org
- http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de icedtea.classpath.org
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=136439120408139&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136570436423916&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136733161405818&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2013-0236.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0237.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0245.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0246.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0247.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1455.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1456.html rhn.redhat.com
- http://security.gentoo.org/glsa/glsa-201406-32.xml security.gentoo.org
- http://www.kb.cert.org/vuls/id/858729 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 www.mandriva.com
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html Vendor Advisory
- http://www.securityfocus.com/bid/57711 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA13-032A.html US Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15888 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19261 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19471 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19484 oval.cisecurity.org
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056 wiki.mageia.org
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907346 bugzilla.redhat.com
- http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS icedtea.classpath.org
- http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de icedtea.classpath.org
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=136439120408139&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136570436423916&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136733161405818&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2013-0236.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0237.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0245.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0246.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0247.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1455.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1456.html rhn.redhat.com
- http://security.gentoo.org/glsa/glsa-201406-32.xml security.gentoo.org
- http://www.kb.cert.org/vuls/id/858729 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 www.mandriva.com
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html Vendor Advisory
- http://www.securityfocus.com/bid/57711 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA13-032A.html US Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15888 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19261 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19471 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19484 oval.cisecurity.org
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056 wiki.mageia.org