CVEvulnerability
CVE-2013-1476
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-02-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-0441 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via "certain value handler constructors."
Affected configurations
• oracle jre 1.7.0
• oracle jdk 1.7.0
• oracle jre 1.6.0
• sun jre 1.6.0
• oracle jdk 1.6.0
• sun jdk 1.6.0
• oracle jre 1.5.0
• sun jre 1.5.0
• oracle jdk 1.5.0
• sun jdk 1.5.0
• oracle jre (<= 1.4.2 40)
• oracle jre 1.4.2 38
• sun jre 1.4.2
• sun jre 1.4.2 1
• sun jre 1.4.2 2
• sun jre 1.4.2 3
• sun jre 1.4.2 4
• sun jre 1.4.2 5
• sun jre 1.4.2 6
• sun jre 1.4.2 7
• sun jre 1.4.2 8
• sun jre 1.4.2 9
• sun jre 1.4.2 10
• sun jre 1.4.2 11
• sun jre 1.4.2 12
• sun jre 1.4.2 13
• sun jre 1.4.2 14
• sun jre 1.4.2 15
• sun jre 1.4.2 16
• sun jre 1.4.2 17
• sun jre 1.4.2 18
• sun jre 1.4.2 19
• sun jre 1.4.2 20
• sun jre 1.4.2 21
• sun jre 1.4.2 22
• sun jre 1.4.2 23
• sun jre 1.4.2 24
• sun jre 1.4.2 25
• sun jre 1.4.2 26
• sun jre 1.4.2 27
• sun jre 1.4.2 28
• sun jre 1.4.2 29
• sun jre 1.4.2 30
• sun jre 1.4.2 31
• sun jre 1.4.2 32
• sun jre 1.4.2 33
• sun jre 1.4.2 34
• sun jre 1.4.2 35
• sun jre 1.4.2 36
• sun jre 1.4.2 37
• oracle jdk (<= 1.4.2 40)
• oracle jdk 1.4.2 38
• sun jdk 1.4.2
• sun jdk 1.4.2 1
• sun jdk 1.4.2 2
• sun jdk 1.4.2 3
• sun jdk 1.4.2 4
• sun jdk 1.4.2 5
• sun jdk 1.4.2 6
• sun jdk 1.4.2 7
… and 27 more
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907457 bugzilla.redhat.com
- http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS icedtea.classpath.org
- http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/corba/rev/5116fe321210 icedtea.classpath.org
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=136439120408139&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136570436423916&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136733161405818&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2013-0236.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0237.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0245.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0246.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0247.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1455.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1456.html rhn.redhat.com
- http://security.gentoo.org/glsa/glsa-201406-32.xml security.gentoo.org
- http://www.kb.cert.org/vuls/id/858729 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 www.mandriva.com
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html Vendor Advisory
- http://www.securityfocus.com/bid/57696 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA13-032A.html US Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16652 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19466 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19475 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19507 oval.cisecurity.org
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056 wiki.mageia.org
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907457 bugzilla.redhat.com
- http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS icedtea.classpath.org
- http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/corba/rev/5116fe321210 icedtea.classpath.org
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=136439120408139&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136570436423916&w=2 marc.info
- http://marc.info/?l=bugtraq&m=136733161405818&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2013-0236.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0237.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0245.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0246.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0247.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1455.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1456.html rhn.redhat.com
- http://security.gentoo.org/glsa/glsa-201406-32.xml security.gentoo.org
- http://www.kb.cert.org/vuls/id/858729 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 www.mandriva.com
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html Vendor Advisory
- http://www.securityfocus.com/bid/57696 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA13-032A.html US Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16652 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19466 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19475 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19507 oval.cisecurity.org
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056 wiki.mageia.org