CVEvulnerability
CVE-2013-0432
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-02-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient clipboard access premission checks."
Affected configurations
• oracle jre 1.7.0
• oracle jdk 1.7.0
• oracle jre 1.6.0
• sun jre 1.6.0
• oracle jdk 1.6.0
• sun jdk 1.6.0
• oracle jre 1.5.0
• sun jre 1.5.0
• oracle jdk 1.5.0
• sun jdk 1.5.0
• oracle jre (<= 1.4.2 40)
• oracle jre 1.4.2 38
• sun jre 1.4.2
• sun jre 1.4.2 1
• sun jre 1.4.2 2
• sun jre 1.4.2 3
• sun jre 1.4.2 4
• sun jre 1.4.2 5
• sun jre 1.4.2 6
• sun jre 1.4.2 7
• sun jre 1.4.2 8
• sun jre 1.4.2 9
• sun jre 1.4.2 10
• sun jre 1.4.2 11
• sun jre 1.4.2 12
• sun jre 1.4.2 13
• sun jre 1.4.2 14
• sun jre 1.4.2 15
• sun jre 1.4.2 16
• sun jre 1.4.2 17
• sun jre 1.4.2 18
• sun jre 1.4.2 19
• sun jre 1.4.2 20
• sun jre 1.4.2 21
• sun jre 1.4.2 22
• sun jre 1.4.2 23
• sun jre 1.4.2 24
• sun jre 1.4.2 25
• sun jre 1.4.2 26
• sun jre 1.4.2 27
• sun jre 1.4.2 28
• sun jre 1.4.2 29
• sun jre 1.4.2 30
• sun jre 1.4.2 31
• sun jre 1.4.2 32
• sun jre 1.4.2 33
• sun jre 1.4.2 34
• sun jre 1.4.2 35
• sun jre 1.4.2 36
• sun jre 1.4.2 37
• oracle jdk (<= 1.4.2 40)
• oracle jdk 1.4.2 38
• sun jdk 1.4.2
• sun jdk 1.4.2 1
• sun jdk 1.4.2 2
• sun jdk 1.4.2 3
• sun jdk 1.4.2 4
• sun jdk 1.4.2 5
• sun jdk 1.4.2 6
• sun jdk 1.4.2 7
… and 27 more
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907219 bugzilla.redhat.com
- http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS icedtea.classpath.org
- http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/e46d557465da icedtea.classpath.org
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=136439120408139&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136570436423916&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136733161405818&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2013-0236.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0237.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0245.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0246.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0247.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1455.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1456.html rhn.redhat.com
- http://security.gentoo.org/glsa/glsa-201406-32.xml security.gentoo.org
- http://www.kb.cert.org/vuls/id/858729 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 www.mandriva.com
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html Vendor Advisory
- http://www.securityfocus.com/bid/57727 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA13-032A.html US Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16567 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19181 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19426 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19489 oval.cisecurity.org
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056 wiki.mageia.org
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907219 bugzilla.redhat.com
- http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS icedtea.classpath.org
- http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/e46d557465da icedtea.classpath.org
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=136439120408139&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136570436423916&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136733161405818&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2013-0236.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0237.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0245.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0246.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0247.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1455.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1456.html rhn.redhat.com
- http://security.gentoo.org/glsa/glsa-201406-32.xml security.gentoo.org
- http://www.kb.cert.org/vuls/id/858729 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 www.mandriva.com
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html Vendor Advisory
- http://www.securityfocus.com/bid/57727 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA13-032A.html US Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16567 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19181 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19426 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19489 oval.cisecurity.org
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056 wiki.mageia.org