Oval Definition:oval:org.mitre.oval:def:24712
Revision Date:2015-03-23Version:7
Title:Vulnerability in Java SE 5.0u61, Java SE 6u71, Java SE 7u51, Java SE 8 allows successful unauthenticated network attacks via multiple protocols
Description:The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-6629
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Java Runtime Environment
Definition Synopsis
  • Determine if the version of Java Runtime Environment equals 1.5.0:update_51
  • Determine if the version of Java Runtime Environment equals 1.5.0:update_51
  • AND Java SE Runtime Environment 5 is installed
  • OR Determine if the version of Java Runtime Environment equals 1.6.0:update_71
  • Determine if the version of Java Runtime Environment equals 1.6.0:update_71
  • AND Java SE Runtime Environment 6 is installed
  • OR Determine if the version of Java Runtime Environment equals 1.7.0:update_51
  • Determine if the version of Java Runtime Environment equals 1.7.0:update_51
  • AND Java SE Runtime Environment 7 is installed
  • OR Determine if the version of Java Runtime Environment equals 1.8.0
  • Determine if the version of Java Runtime Environment equals 1.8.0
  • AND Java SE Runtime Environment 8 is installed
  • BACK