CVE-2013-2457
Summary
| CVE | CVE-2013-2457 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-06-18 22:55:02 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions. |
Risk And Classification
Primary CVSS: v2.0 5 from [email protected]
AV:N/AC:L/Au:N/C:N/I:P/A:N
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:L/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Jdk | 1.5.0 | update36 | All | All |
| Application | Oracle | Jdk | 1.5.0 | update38 | All | All |
| Application | Oracle | Jdk | 1.5.0 | update39 | All | All |
| Application | Oracle | Jdk | 1.5.0 | update40 | All | All |
| Application | Oracle | Jdk | 1.5.0 | update41 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update22 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update23 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update24 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update25 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update26 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update27 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update29 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update30 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update31 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update32 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update33 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update34 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update35 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update37 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update38 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update39 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update41 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update43 | All | All |
| Application | Oracle | Jdk | 1.7.0 | All | All | All |
| Application | Oracle | Jdk | 1.7.0 | update1 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update10 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update11 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update13 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update15 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update17 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update2 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update3 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update4 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update5 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update6 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update7 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update9 | All | All |
| Application | Oracle | Jdk | All | update45 | All | All |
| Application | Oracle | Jdk | All | update45 | All | All |
| Application | Oracle | Jdk | All | update21 | All | All |
| Application | Oracle | Jre | 1.5.0 | update36 | All | All |
| Application | Oracle | Jre | 1.5.0 | update38 | All | All |
| Application | Oracle | Jre | 1.5.0 | update39 | All | All |
| Application | Oracle | Jre | 1.5.0 | update40 | All | All |
| Application | Oracle | Jre | 1.5.0 | update41 | All | All |
| Application | Oracle | Jre | 1.6.0 | update22 | All | All |
| Application | Oracle | Jre | 1.6.0 | update23 | All | All |
| Application | Oracle | Jre | 1.6.0 | update24 | All | All |
| Application | Oracle | Jre | 1.6.0 | update25 | All | All |
| Application | Oracle | Jre | 1.6.0 | update26 | All | All |
| Application | Oracle | Jre | 1.6.0 | update27 | All | All |
| Application | Oracle | Jre | 1.6.0 | update29 | All | All |
| Application | Oracle | Jre | 1.6.0 | update30 | All | All |
| Application | Oracle | Jre | 1.6.0 | update31 | All | All |
| Application | Oracle | Jre | 1.6.0 | update32 | All | All |
| Application | Oracle | Jre | 1.6.0 | update33 | All | All |
| Application | Oracle | Jre | 1.6.0 | update34 | All | All |
| Application | Oracle | Jre | 1.6.0 | update35 | All | All |
| Application | Oracle | Jre | 1.6.0 | update37 | All | All |
| Application | Oracle | Jre | 1.6.0 | update38 | All | All |
| Application | Oracle | Jre | 1.6.0 | update39 | All | All |
| Application | Oracle | Jre | 1.6.0 | update41 | All | All |
| Application | Oracle | Jre | 1.6.0 | update43 | All | All |
| Application | Oracle | Jre | 1.7.0 | All | All | All |
| Application | Oracle | Jre | 1.7.0 | update1 | All | All |
| Application | Oracle | Jre | 1.7.0 | update10 | All | All |
| Application | Oracle | Jre | 1.7.0 | update11 | All | All |
| Application | Oracle | Jre | 1.7.0 | update13 | All | All |
| Application | Oracle | Jre | 1.7.0 | update15 | All | All |
| Application | Oracle | Jre | 1.7.0 | update17 | All | All |
| Application | Oracle | Jre | 1.7.0 | update2 | All | All |
| Application | Oracle | Jre | 1.7.0 | update3 | All | All |
| Application | Oracle | Jre | 1.7.0 | update4 | All | All |
| Application | Oracle | Jre | 1.7.0 | update5 | All | All |
| Application | Oracle | Jre | 1.7.0 | update6 | All | All |
| Application | Oracle | Jre | 1.7.0 | update7 | All | All |
| Application | Oracle | Jre | 1.7.0 | update9 | All | All |
| Application | Oracle | Jre | All | update45 | All | All |
| Application | Oracle | Jre | All | update45 | All | All |
| Application | Oracle | Jre | All | update21 | All | All |
| Application | Sun | Jdk | 1.5.0 | All | All | All |
| Application | Sun | Jdk | 1.5.0 | update1 | All | All |
| Application | Sun | Jdk | 1.5.0 | update10 | All | All |
| Application | Sun | Jdk | 1.5.0 | update11 | All | All |
| Application | Sun | Jdk | 1.5.0 | update11_b03 | All | All |
| Application | Sun | Jdk | 1.5.0 | update12 | All | All |
| Application | Sun | Jdk | 1.5.0 | update13 | All | All |
| Application | Sun | Jdk | 1.5.0 | update14 | All | All |
| Application | Sun | Jdk | 1.5.0 | update15 | All | All |
| Application | Sun | Jdk | 1.5.0 | update16 | All | All |
| Application | Sun | Jdk | 1.5.0 | update17 | All | All |
| Application | Sun | Jdk | 1.5.0 | update18 | All | All |
| Application | Sun | Jdk | 1.5.0 | update19 | All | All |
| Application | Sun | Jdk | 1.5.0 | update2 | All | All |
| Application | Sun | Jdk | 1.5.0 | update20 | All | All |
| Application | Sun | Jdk | 1.5.0 | update21 | All | All |
| Application | Sun | Jdk | 1.5.0 | update22 | All | All |
| Application | Sun | Jdk | 1.5.0 | update23 | All | All |
| Application | Sun | Jdk | 1.5.0 | update24 | All | All |
| Application | Sun | Jdk | 1.5.0 | update25 | All | All |
| Application | Sun | Jdk | 1.5.0 | update26 | All | All |
| Application | Sun | Jdk | 1.5.0 | update27 | All | All |
| Application | Sun | Jdk | 1.5.0 | update28 | All | All |
| Application | Sun | Jdk | 1.5.0 | update29 | All | All |
| Application | Sun | Jdk | 1.5.0 | update3 | All | All |
| Application | Sun | Jdk | 1.5.0 | update31 | All | All |
| Application | Sun | Jdk | 1.5.0 | update33 | All | All |
| Application | Sun | Jdk | 1.5.0 | update4 | All | All |
| Application | Sun | Jdk | 1.5.0 | update5 | All | All |
| Application | Sun | Jdk | 1.5.0 | update6 | All | All |
| Application | Sun | Jdk | 1.5.0 | update7 | All | All |
| Application | Sun | Jdk | 1.5.0 | update7_b03 | All | All |
| Application | Sun | Jdk | 1.5.0 | update8 | All | All |
| Application | Sun | Jdk | 1.5.0 | update9 | All | All |
| Application | Sun | Jdk | 1.6.0 | All | All | All |
| Application | Sun | Jdk | 1.6.0 | update1 | All | All |
| Application | Sun | Jdk | 1.6.0 | update1_b06 | All | All |
| Application | Sun | Jdk | 1.6.0 | update2 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_10 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_11 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_12 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_13 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_14 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_15 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_16 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_17 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_18 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_19 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_20 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_21 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_3 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_4 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_5 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_6 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_7 | All | All |
| Application | Sun | Jre | 1.5.0 | All | All | All |
| Application | Sun | Jre | 1.5.0 | update1 | All | All |
| Application | Sun | Jre | 1.5.0 | update10 | All | All |
| Application | Sun | Jre | 1.5.0 | update11 | All | All |
| Application | Sun | Jre | 1.5.0 | update12 | All | All |
| Application | Sun | Jre | 1.5.0 | update13 | All | All |
| Application | Sun | Jre | 1.5.0 | update14 | All | All |
| Application | Sun | Jre | 1.5.0 | update15 | All | All |
| Application | Sun | Jre | 1.5.0 | update16 | All | All |
| Application | Sun | Jre | 1.5.0 | update17 | All | All |
| Application | Sun | Jre | 1.5.0 | update18 | All | All |
| Application | Sun | Jre | 1.5.0 | update19 | All | All |
| Application | Sun | Jre | 1.5.0 | update2 | All | All |
| Application | Sun | Jre | 1.5.0 | update20 | All | All |
| Application | Sun | Jre | 1.5.0 | update21 | All | All |
| Application | Sun | Jre | 1.5.0 | update22 | All | All |
| Application | Sun | Jre | 1.5.0 | update23 | All | All |
| Application | Sun | Jre | 1.5.0 | update24 | All | All |
| Application | Sun | Jre | 1.5.0 | update25 | All | All |
| Application | Sun | Jre | 1.5.0 | update26 | All | All |
| Application | Sun | Jre | 1.5.0 | update27 | All | All |
| Application | Sun | Jre | 1.5.0 | update28 | All | All |
| Application | Sun | Jre | 1.5.0 | update29 | All | All |
| Application | Sun | Jre | 1.5.0 | update3 | All | All |
| Application | Sun | Jre | 1.5.0 | update31 | All | All |
| Application | Sun | Jre | 1.5.0 | update33 | All | All |
| Application | Sun | Jre | 1.5.0 | update4 | All | All |
| Application | Sun | Jre | 1.5.0 | update5 | All | All |
| Application | Sun | Jre | 1.5.0 | update6 | All | All |
| Application | Sun | Jre | 1.5.0 | update7 | All | All |
| Application | Sun | Jre | 1.5.0 | update8 | All | All |
| Application | Sun | Jre | 1.5.0 | update9 | All | All |
| Application | Sun | Jre | 1.6.0 | All | All | All |
| Application | Sun | Jre | 1.6.0 | update_1 | All | All |
| Application | Sun | Jre | 1.6.0 | update_10 | All | All |
| Application | Sun | Jre | 1.6.0 | update_11 | All | All |
| Application | Sun | Jre | 1.6.0 | update_12 | All | All |
| Application | Sun | Jre | 1.6.0 | update_13 | All | All |
| Application | Sun | Jre | 1.6.0 | update_14 | All | All |
| Application | Sun | Jre | 1.6.0 | update_15 | All | All |
| Application | Sun | Jre | 1.6.0 | update_16 | All | All |
| Application | Sun | Jre | 1.6.0 | update_17 | All | All |
| Application | Sun | Jre | 1.6.0 | update_18 | All | All |
| Application | Sun | Jre | 1.6.0 | update_19 | All | All |
| Application | Sun | Jre | 1.6.0 | update_2 | All | All |
| Application | Sun | Jre | 1.6.0 | update_20 | All | All |
| Application | Sun | Jre | 1.6.0 | update_21 | All | All |
| Application | Sun | Jre | 1.6.0 | update_3 | All | All |
| Application | Sun | Jre | 1.6.0 | update_4 | All | All |
| Application | Sun | Jre | 1.6.0 | update_5 | All | All |
| Application | Sun | Jre | 1.6.0 | update_6 | All | All |
| Application | Sun | Jre | 1.6.0 | update_7 | All | All |
| Application | Sun | Jre | 1.6.0 | update_9 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [security-announce] SUSE-SU-2013:1263-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp | af854a3a-2127-422b-91ae-364da2661108 | h20000.www2.hp.com | |
| Oracle Java Critical Patch Update - June 2013 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Mageia Advisory: MGASA-2013-0185 - Updated java-1.7.0-openjdk packages fix multiple security vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | advisories.mageia.org | |
| [security-announce] SUSE-SU-2013:1255-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Bug 975133 – CVE-2013-2457 OpenJDK: Proper class checking (JMX, 8008120) | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| IBM Security Bulletin: Multiple vulnerabilities in IBM WebSphere Real Time - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Oracle Java SE CVE-2013-2457 Remote Security Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| [security-announce] SUSE-SU-2013:1293-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Oracle Releases Updates for Javadoc and Other Java SE Vulnerabilities | US-CERT | af854a3a-2127-422b-91ae-364da2661108 | www.us-cert.gov | US Government Resource |
| [security-announce] SUSE-SU-2013:1305-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Gentoo Linux Documentation -- IcedTea JDK: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| '[security bulletin] HPSBUX02907 rev.1 - HP-UX Running Java7, Remote Unauthorized Access, Disclosure' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| '[security bulletin] HPSBUX02908 rev.1 - HP-UX Running Java6, Remote Unauthorized Access, Disclosure' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| jdk7u/jdk7u-dev/jdk: ffef9e05564e | af854a3a-2127-422b-91ae-364da2661108 | hg.openjdk.java.net | |
| [security-announce] SUSE-SU-2013:1256-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Support / Security / Advisories / / MDVSA-2013:183 | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| [security-announce] SUSE-SU-2013:1257-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.