{"schemaVersion":3,"id":"CVE-2013-1493","aliases":["CGA-2g6c-fpjf-qgq3","CGA-2x7w-cwq5-xx66","CGA-47x6-jvjm-8246","CGA-4ww6-2m22-22rr","CGA-5rc9-4j6j-vvwr","CGA-5vw9-w26f-w98w","CGA-5vwc-77vc-c9wg","CGA-5wxc-gfw4-hfc7","CGA-68mh-3h47-rcm4","CGA-6qhq-wmcq-7xwh","CGA-89vx-g922-f2p4","CGA-8jgw-42pp-hfw8","CGA-9vmw-96q6-gx9q","CGA-f44c-5rqw-g9w7","CGA-fc24-62x4-2q3p","CGA-g2h3-84m2-hrg9","CGA-g654-w3vh-wf5p","CGA-gqmw-wvhf-g8x7","CGA-jfjj-26v4-xg6v","CGA-m574-p4gx-qxcq","CGA-m5fj-j3f7-q9vw","CGA-mv6m-j983-9jrr","CGA-pc8p-r85p-v9q8","CGA-q47f-q877-w8g6","CGA-qg5p-mp5m-7mvh","CGA-qqhr-6hxm-h57f","CGA-rm82-5995-rf75","CGA-rqxh-j7m5-fc52","CGA-v8xg-prr3-q22p","CGA-vm69-8mjh-2hv6","CGA-wf23-37q8-6jrv","CGA-xvw9-x3h4-cc45"],"status":"published","duplicateOf":null,"title":null,"description":"The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.","dates":{"published":"2013-03-04T16:00:00.000Z","modified":"2024-08-06T15:04:48.820Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.86151,"percentile":0.99731,"severity":"critical","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.86151},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.86151,"percentile":0.99731}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.86151,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.86151,"percentile":0.99731}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"24904","name":"Java CMM - Remote Code Execution (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/24904","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/24904.rb","codes":["CVE-2013-1493","OSVDB-90737"]},"metasploit":null},{"id":"MSF_EXPLOIT_WINDOWS_BROWSER_JAVA_CMM","name":"Java CMM Remote Code Execution","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/browser/java_cmm.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/browser/java_cmm","rank":"300","rankName":"normal","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":2,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"chainguard","product":"openjdk-11-openj9-default-policy","name":"openjdk-11-openj9-default-policy","label":"openjdk-11-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-11-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.53.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-17-openj9-default-policy","name":"openjdk-17-openj9-default-policy","label":"openjdk-17-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-17-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.53.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-21-openj9-default-policy","name":"openjdk-21-openj9-default-policy","label":"openjdk-21-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-21-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.48.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9","name":"openjdk-25-openj9","label":"openjdk-25-openj9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-dbg","name":"openjdk-25-openj9-dbg","label":"openjdk-25-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-default-jdk","name":"openjdk-25-openj9-default-jdk","label":"openjdk-25-openj9-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-default-jdk","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-default-jvm","name":"openjdk-25-openj9-default-jvm","label":"openjdk-25-openj9-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-default-jvm","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-jmods","name":"openjdk-25-openj9-jmods","label":"openjdk-25-openj9-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-jmods","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-jre","name":"openjdk-25-openj9-jre","label":"openjdk-25-openj9-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-jre","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9","name":"openjdk-26-openj9","label":"openjdk-26-openj9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-dbg","name":"openjdk-26-openj9-dbg","label":"openjdk-26-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-default-jdk","name":"openjdk-26-openj9-default-jdk","label":"openjdk-26-openj9-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-default-jdk","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-default-jvm","name":"openjdk-26-openj9-default-jvm","label":"openjdk-26-openj9-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-default-jvm","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-jmods","name":"openjdk-26-openj9-jmods","label":"openjdk-26-openj9-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-jmods","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-jre","name":"openjdk-26-openj9-jre","label":"openjdk-26-openj9-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-jre","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-8-openj9-dbg","name":"openjdk-8-openj9-dbg","label":"openjdk-8-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-8-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.53.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r1","eol":null,"hubHref":null},{"vendor":"oracle","product":"jdk","name":"jdk","label":"jdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.6.0","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update22","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update23","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update24","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update25","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update26","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update27","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update29","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update30","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update31","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update32","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update33","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update34","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update35","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update37","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update38","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update39","noFixRecorded":false,"fixedIn":null},{"text":"≤ 1.5.0","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update36","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update38","noFixRecorded":false,"fixedIn":null},{"text":"≤ 1.7.0","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update1","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update10","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update11","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update13","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update2","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update3","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update4","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update5","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update6","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update7","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"oracle-jdk","label":"Oracle JDK","category":"lang"}},"hubHref":"/vendor/oracle/jdk"},{"vendor":"oracle","product":"jre","name":"jre","label":"jre","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.7.0","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update1","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update10","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update11","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update13","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update2","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update3","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update4","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update5","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update6","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update7","noFixRecorded":false,"fixedIn":null},{"text":"1.7.0:update9","noFixRecorded":false,"fixedIn":null},{"text":"≤ 1.5.0","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update36","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update38","noFixRecorded":false,"fixedIn":null},{"text":"≤ 1.6.0","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update22","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update23","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update24","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update25","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update26","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update27","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update29","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update30","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update31","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update32","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update33","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update34","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update35","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update37","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update38","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update39","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"oracle-jdk","label":"Oracle JDK","category":"lang"}},"hubHref":"/vendor/oracle/jre"},{"vendor":"sun","product":"jdk","name":"jdk","label":"jdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.6.0","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_10","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_11","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_12","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_13","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_14","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_15","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_16","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_17","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_18","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_19","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_20","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_21","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_3","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_4","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_5","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_6","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_7","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update1","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update1_b06","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update10","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update11","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update11_b03","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update12","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update13","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update14","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update15","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update16","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update17","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update18","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update19","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update20","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update21","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update22","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update23","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update24","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update25","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update26","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update27","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update28","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update29","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update3","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update31","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update33","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update4","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update6","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update7","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update7_b03","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update8","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update9","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.6.0 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update11_b03 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9","eol":null,"hubHref":"/vendor/sun/jdk"},{"vendor":"sun","product":"jre","name":"jre","label":"jre","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5.0","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update10","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update11","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update12","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update13","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update14","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update15","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update16","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update17","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update18","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update19","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update20","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update21","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update22","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update23","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update24","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update25","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update26","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update27","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update28","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update29","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update3","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update31","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update33","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update4","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update6","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update7","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update8","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0:update9","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_1","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_10","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_11","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_12","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_13","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_14","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_15","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_16","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_17","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_18","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_19","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_2","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_20","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_21","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_3","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_4","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_5","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_6","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_7","noFixRecorded":false,"fixedIn":null},{"text":"1.6.0:update_9","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update_9","eol":null,"hubHref":"/vendor/sun/jre"}],"affectedCount":20,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19246","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19246","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"https://krebsonsecurity.com/2013/03/new-java-0-day-attack-echoes-bit9-breach/","label":"krebsonsecurity.com/2013/03/new-java-0-day-attack-echoes-bit9-breach/","hostname":"krebsonsecurity.com","tags":["X Refsource MISC"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00012.html","label":"lists.opensuse.org/opensuse-security-announce/2013-03/msg00012.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","label":"security.gentoo.org/glsa/glsa-201406-32.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.exploit-db.com/exploits/24904","label":"www.exploit-db.com/exploits/24904","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB"]},{"url":"http://www.securityfocus.com/bid/58238","label":"www.securityfocus.com/bid/58238","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:095","label":"www.mandriva.com/security/advisories?name=MDVSA-2013:095","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html","label":"www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.securitytracker.com/id/1029803","label":"www.securitytracker.com/id/1029803","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://marc.info/?l=bugtraq&m=136570436423916&w=2","label":"marc.info?l=bugtraq&m=136570436423916&w=2","hostname":"marc.info","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0604.html","label":"rhn.redhat.com/errata/RHSA-2013-0604.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA13-064A","label":"www.us-cert.gov/ncas/alerts/TA13-064A","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00009.html","label":"lists.opensuse.org/opensuse-security-announce/2013-03/msg00009.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","label":"rhn.redhat.com/errata/RHSA-2013-1455.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://twitter.com/jduck1337/status/307629902574800897","label":"twitter.com/jduck1337/status/307629902574800897","hostname":"twitter.com","tags":["X Refsource MISC"]},{"url":"http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html","label":"mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html","hostname":"mail.openjdk.java.net","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00011.html","label":"lists.opensuse.org/opensuse-security-announce/2013-03/msg00011.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.symantec.com/connect/blogs/latest-java-zero-day-shares-connections-bit9-security-incident","label":"www.symantec.com/connect/blogs/latest-java-zero-day-shares-connections-bit9-security-incident","hostname":"www.symantec.com","tags":["X Refsource MISC"]},{"url":"http://marc.info/?l=bugtraq&m=136439120408139&w=2","label":"marc.info?l=bugtraq&m=136439120408139&w=2","hostname":"marc.info","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html","label":"lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.ubuntu.com/usn/USN-1755-2","label":"www.ubuntu.com/usn/USN-1755-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.oracle.com/ocom/groups/public/%40otn/documents/webcontent/1915099.xml","label":"www.oracle.com/ocom/groups/public/%40otn/documents/webcontent/1915099.xml","hostname":"www.oracle.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.kb.cert.org/vuls/id/688246","label":"www.kb.cert.org/vuls/id/688246","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=917553","label":"bugzilla.redhat.com/show_bug.cgi?id=917553","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1456.html","label":"rhn.redhat.com/errata/RHSA-2013-1456.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04117626-1","label":"h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04117626-1","hostname":"h20565.www2.hp.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html","label":"blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html","hostname":"blog.fireeye.com","tags":["X Refsource MISC"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0088","label":"wiki.mageia.org/en/Support/Advisories/MGASA-2013-0088","hostname":"wiki.mageia.org","tags":["X Refsource CONFIRM"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19477","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19477","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0603.html","label":"rhn.redhat.com/errata/RHSA-2013-0603.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0601.html","label":"rhn.redhat.com/errata/RHSA-2013-0601.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10534-1","RHSA-2013:0600","RHSA-2013:0601","RHSA-2013:0602","RHSA-2013:0603","RHSA-2013:0604","RHSA-2013:0605","RHSA-2013:0624","RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:1455","RHSA-2013:1456"],"duplicates":[],"related":["CGA-G46X-8WP2-XPW2","CGA-M8HM-JM47-CWCX","CGA-MMMX-QX5C-H5G8","CGA-V8G5-VP2F-7PGH","CGA-X37W-352C-FWG8","OPENSUSE-SU-2024:10534-1"]},"timeline":[{"kind":"published","date":"2013-03-04T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T15:04:48.820Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:00:59.624Z","stale":false,"partial":false}}