Unscored severity · published Jun 18, 2013
CVE-2013-2444
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX…
–
CVSS
4.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.9% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Javafx · Oracle
through 2.2.21; 2.0; 2.0.2; 2.0.3; 2.1; 2.2; +4 more · source: NVD
JD
Jdk · Oracle
through 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +34 more · source: NVD
JR
Jre · Oracle
through 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2444
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2444
advisories.mageia.org
http://advisories.mageia.org/MGASA-2013-0185.html
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
hg.openjdk.java.net
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/09c14ca57ff0
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html
More from Javafx
–
CVE-2015-4916
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than…
–
CVE-2015-4908
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than…
–
CVE-2015-4906
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different…
–
CVE-2015-2619
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors…
–
CVE-2015-2638
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity,…