Unscored severity · published Jun 18, 2013
CVE-2013-1571
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier;…
–
CVSS
66.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Exploitation
Is it being used?
Exploit prediction (EPSS)66.9% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Javafx · Oracle
through 2.2.21; 2.0; 2.0.2; 2.0.3; 2.1; 2.2; +4 more · source: NVD
JD
Jdk · Oracle
through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more · source: NVD
JR
Jre · Oracle
through 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1571
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1571
advisories.mageia.org
http://advisories.mageia.org/MGASA-2013-0185.html
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
Exploit
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html
More from Javafx
–
CVE-2015-4916
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than…
–
CVE-2015-4908
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than…
–
CVE-2015-4906
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different…
–
CVE-2015-2619
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors…
–
CVE-2015-2638
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity,…