CVE-2013-1489
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 7.6%
probabilidade de exploração
7.6%top 5% das CVEs
exploração observada
nãonenhuma fonte reporta
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
Produtos afetados
n/a · n/aReferências
http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53http://marc.info/?l=bugtraq&m=136439120408139&w=2http://marc.info/?l=bugtraq&m=136733161405818&w=2http://rhn.redhat.com/errata/RHSA-2013-0237.htmlhttp://seclists.org/fulldisclosure/2013/Jan/241https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15906https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19171http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/http://www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150http://www.kb.cert.org/vuls/id/858729http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.htmlhttp://www.scmagazine.com.au/News/330453%2Cjava-still-unsafe-new-flaws-discovered.aspx