Oval Definition:	oval:org.mitre.oval:def:23887
Revision Date: 2014-05-26 Version: 128 Title: ELSA-2013:0957: java-1.7.0-openjdk security update (Critical) Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 ELSA-2013:0957-00 Platform(s): Oracle Linux 6 Product(s): java-1.7.0-openjdk Definition Synopsis Oracle Linux 6.x AND rpm test java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.3.el6_4 OR java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.3.el6_4 OR java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.3.el6_4 OR java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.3.el6_4 OR java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.3.el6_4
BACK