CVE Vulnerabilities

CVE-2013-1489

Published: Jan 31, 2013 | Modified: Nov 07, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
AV:N/AC:M/Au:N/C:N/I:N/A:N
RedHat/V3
Ubuntu
MEDIUM

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the Very High security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka Issue 53 and the Java Security Slider vulnerability.

Affected Software

Name Vendor Start Version End Version
Jdk Oracle 1.7.0-update10 (including) 1.7.0-update10 (including)
Jdk Oracle 1.7.0-update11 (including) 1.7.0-update11 (including)
Jre Oracle 1.7.0-update10 (including) 1.7.0-update10 (including)
Jre Oracle 1.7.0-update11 (including) 1.7.0-update11 (including)
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.7.0-oracle-1:1.7.0.13-1jpp.1.el5_9 *
Supplementary for Red Hat Enterprise Linux 6 RedHat java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3 *

References