CVE-2013-2471
Summary
| CVE | CVE-2013-2471 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-06-18 22:55:02 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks." |
Risk And Classification
Primary CVSS: v2.0 10 from [email protected]
AV:N/AC:L/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Jdk | 1.5.0 | update36 | All | All |
| Application | Oracle | Jdk | 1.5.0 | update38 | All | All |
| Application | Oracle | Jdk | 1.5.0 | update39 | All | All |
| Application | Oracle | Jdk | 1.5.0 | update40 | All | All |
| Application | Oracle | Jdk | 1.5.0 | update41 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update22 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update23 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update24 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update25 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update26 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update27 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update29 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update30 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update31 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update32 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update33 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update34 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update35 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update37 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update38 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update39 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update41 | All | All |
| Application | Oracle | Jdk | 1.6.0 | update43 | All | All |
| Application | Oracle | Jdk | 1.7.0 | All | All | All |
| Application | Oracle | Jdk | 1.7.0 | update1 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update10 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update11 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update13 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update15 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update17 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update2 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update3 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update4 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update5 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update6 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update7 | All | All |
| Application | Oracle | Jdk | 1.7.0 | update9 | All | All |
| Application | Oracle | Jdk | All | update45 | All | All |
| Application | Oracle | Jdk | All | update45 | All | All |
| Application | Oracle | Jdk | All | update21 | All | All |
| Application | Oracle | Jre | 1.5.0 | update36 | All | All |
| Application | Oracle | Jre | 1.5.0 | update38 | All | All |
| Application | Oracle | Jre | 1.5.0 | update39 | All | All |
| Application | Oracle | Jre | 1.5.0 | update40 | All | All |
| Application | Oracle | Jre | 1.5.0 | update41 | All | All |
| Application | Oracle | Jre | 1.6.0 | update22 | All | All |
| Application | Oracle | Jre | 1.6.0 | update23 | All | All |
| Application | Oracle | Jre | 1.6.0 | update24 | All | All |
| Application | Oracle | Jre | 1.6.0 | update25 | All | All |
| Application | Oracle | Jre | 1.6.0 | update26 | All | All |
| Application | Oracle | Jre | 1.6.0 | update27 | All | All |
| Application | Oracle | Jre | 1.6.0 | update29 | All | All |
| Application | Oracle | Jre | 1.6.0 | update30 | All | All |
| Application | Oracle | Jre | 1.6.0 | update31 | All | All |
| Application | Oracle | Jre | 1.6.0 | update32 | All | All |
| Application | Oracle | Jre | 1.6.0 | update33 | All | All |
| Application | Oracle | Jre | 1.6.0 | update34 | All | All |
| Application | Oracle | Jre | 1.6.0 | update35 | All | All |
| Application | Oracle | Jre | 1.6.0 | update37 | All | All |
| Application | Oracle | Jre | 1.6.0 | update38 | All | All |
| Application | Oracle | Jre | 1.6.0 | update39 | All | All |
| Application | Oracle | Jre | 1.6.0 | update41 | All | All |
| Application | Oracle | Jre | 1.6.0 | update43 | All | All |
| Application | Oracle | Jre | 1.7.0 | All | All | All |
| Application | Oracle | Jre | 1.7.0 | update1 | All | All |
| Application | Oracle | Jre | 1.7.0 | update10 | All | All |
| Application | Oracle | Jre | 1.7.0 | update11 | All | All |
| Application | Oracle | Jre | 1.7.0 | update13 | All | All |
| Application | Oracle | Jre | 1.7.0 | update15 | All | All |
| Application | Oracle | Jre | 1.7.0 | update17 | All | All |
| Application | Oracle | Jre | 1.7.0 | update2 | All | All |
| Application | Oracle | Jre | 1.7.0 | update3 | All | All |
| Application | Oracle | Jre | 1.7.0 | update4 | All | All |
| Application | Oracle | Jre | 1.7.0 | update5 | All | All |
| Application | Oracle | Jre | 1.7.0 | update6 | All | All |
| Application | Oracle | Jre | 1.7.0 | update7 | All | All |
| Application | Oracle | Jre | 1.7.0 | update9 | All | All |
| Application | Oracle | Jre | All | update45 | All | All |
| Application | Oracle | Jre | All | update45 | All | All |
| Application | Oracle | Jre | All | update21 | All | All |
| Application | Sun | Jdk | 1.5.0 | All | All | All |
| Application | Sun | Jdk | 1.5.0 | update1 | All | All |
| Application | Sun | Jdk | 1.5.0 | update10 | All | All |
| Application | Sun | Jdk | 1.5.0 | update11 | All | All |
| Application | Sun | Jdk | 1.5.0 | update11_b03 | All | All |
| Application | Sun | Jdk | 1.5.0 | update12 | All | All |
| Application | Sun | Jdk | 1.5.0 | update13 | All | All |
| Application | Sun | Jdk | 1.5.0 | update14 | All | All |
| Application | Sun | Jdk | 1.5.0 | update15 | All | All |
| Application | Sun | Jdk | 1.5.0 | update16 | All | All |
| Application | Sun | Jdk | 1.5.0 | update17 | All | All |
| Application | Sun | Jdk | 1.5.0 | update18 | All | All |
| Application | Sun | Jdk | 1.5.0 | update19 | All | All |
| Application | Sun | Jdk | 1.5.0 | update2 | All | All |
| Application | Sun | Jdk | 1.5.0 | update20 | All | All |
| Application | Sun | Jdk | 1.5.0 | update21 | All | All |
| Application | Sun | Jdk | 1.5.0 | update22 | All | All |
| Application | Sun | Jdk | 1.5.0 | update23 | All | All |
| Application | Sun | Jdk | 1.5.0 | update24 | All | All |
| Application | Sun | Jdk | 1.5.0 | update25 | All | All |
| Application | Sun | Jdk | 1.5.0 | update26 | All | All |
| Application | Sun | Jdk | 1.5.0 | update27 | All | All |
| Application | Sun | Jdk | 1.5.0 | update28 | All | All |
| Application | Sun | Jdk | 1.5.0 | update29 | All | All |
| Application | Sun | Jdk | 1.5.0 | update3 | All | All |
| Application | Sun | Jdk | 1.5.0 | update31 | All | All |
| Application | Sun | Jdk | 1.5.0 | update33 | All | All |
| Application | Sun | Jdk | 1.5.0 | update4 | All | All |
| Application | Sun | Jdk | 1.5.0 | update5 | All | All |
| Application | Sun | Jdk | 1.5.0 | update6 | All | All |
| Application | Sun | Jdk | 1.5.0 | update7 | All | All |
| Application | Sun | Jdk | 1.5.0 | update7_b03 | All | All |
| Application | Sun | Jdk | 1.5.0 | update8 | All | All |
| Application | Sun | Jdk | 1.5.0 | update9 | All | All |
| Application | Sun | Jdk | 1.6.0 | All | All | All |
| Application | Sun | Jdk | 1.6.0 | update1 | All | All |
| Application | Sun | Jdk | 1.6.0 | update1_b06 | All | All |
| Application | Sun | Jdk | 1.6.0 | update2 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_10 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_11 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_12 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_13 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_14 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_15 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_16 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_17 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_18 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_19 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_20 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_21 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_3 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_4 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_5 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_6 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_7 | All | All |
| Application | Sun | Jre | 1.5.0 | All | All | All |
| Application | Sun | Jre | 1.5.0 | update1 | All | All |
| Application | Sun | Jre | 1.5.0 | update10 | All | All |
| Application | Sun | Jre | 1.5.0 | update11 | All | All |
| Application | Sun | Jre | 1.5.0 | update12 | All | All |
| Application | Sun | Jre | 1.5.0 | update13 | All | All |
| Application | Sun | Jre | 1.5.0 | update14 | All | All |
| Application | Sun | Jre | 1.5.0 | update15 | All | All |
| Application | Sun | Jre | 1.5.0 | update16 | All | All |
| Application | Sun | Jre | 1.5.0 | update17 | All | All |
| Application | Sun | Jre | 1.5.0 | update18 | All | All |
| Application | Sun | Jre | 1.5.0 | update19 | All | All |
| Application | Sun | Jre | 1.5.0 | update2 | All | All |
| Application | Sun | Jre | 1.5.0 | update20 | All | All |
| Application | Sun | Jre | 1.5.0 | update21 | All | All |
| Application | Sun | Jre | 1.5.0 | update22 | All | All |
| Application | Sun | Jre | 1.5.0 | update23 | All | All |
| Application | Sun | Jre | 1.5.0 | update24 | All | All |
| Application | Sun | Jre | 1.5.0 | update25 | All | All |
| Application | Sun | Jre | 1.5.0 | update26 | All | All |
| Application | Sun | Jre | 1.5.0 | update27 | All | All |
| Application | Sun | Jre | 1.5.0 | update28 | All | All |
| Application | Sun | Jre | 1.5.0 | update29 | All | All |
| Application | Sun | Jre | 1.5.0 | update3 | All | All |
| Application | Sun | Jre | 1.5.0 | update31 | All | All |
| Application | Sun | Jre | 1.5.0 | update33 | All | All |
| Application | Sun | Jre | 1.5.0 | update4 | All | All |
| Application | Sun | Jre | 1.5.0 | update5 | All | All |
| Application | Sun | Jre | 1.5.0 | update6 | All | All |
| Application | Sun | Jre | 1.5.0 | update7 | All | All |
| Application | Sun | Jre | 1.5.0 | update8 | All | All |
| Application | Sun | Jre | 1.5.0 | update9 | All | All |
| Application | Sun | Jre | 1.6.0 | All | All | All |
| Application | Sun | Jre | 1.6.0 | update_1 | All | All |
| Application | Sun | Jre | 1.6.0 | update_10 | All | All |
| Application | Sun | Jre | 1.6.0 | update_11 | All | All |
| Application | Sun | Jre | 1.6.0 | update_12 | All | All |
| Application | Sun | Jre | 1.6.0 | update_13 | All | All |
| Application | Sun | Jre | 1.6.0 | update_14 | All | All |
| Application | Sun | Jre | 1.6.0 | update_15 | All | All |
| Application | Sun | Jre | 1.6.0 | update_16 | All | All |
| Application | Sun | Jre | 1.6.0 | update_17 | All | All |
| Application | Sun | Jre | 1.6.0 | update_18 | All | All |
| Application | Sun | Jre | 1.6.0 | update_19 | All | All |
| Application | Sun | Jre | 1.6.0 | update_2 | All | All |
| Application | Sun | Jre | 1.6.0 | update_20 | All | All |
| Application | Sun | Jre | 1.6.0 | update_21 | All | All |
| Application | Sun | Jre | 1.6.0 | update_3 | All | All |
| Application | Sun | Jre | 1.6.0 | update_4 | All | All |
| Application | Sun | Jre | 1.6.0 | update_5 | All | All |
| Application | Sun | Jre | 1.6.0 | update_6 | All | All |
| Application | Sun | Jre | 1.6.0 | update_7 | All | All |
| Application | Sun | Jre | 1.6.0 | update_9 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [security-announce] SUSE-SU-2013:1263-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp | af854a3a-2127-422b-91ae-364da2661108 | h20000.www2.hp.com | |
| Oracle Java Critical Patch Update - June 2013 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Mageia Advisory: MGASA-2013-0185 - Updated java-1.7.0-openjdk packages fix multiple security vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | advisories.mageia.org | |
| [security-announce] SUSE-SU-2013:1255-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| IBM Security Bulletin: Multiple vulnerabilities in IBM WebSphere Real Time - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| [security-announce] SUSE-SU-2013:1293-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| jdk7u/jdk7u-dev/jdk: 4c3d38927a26 | af854a3a-2127-422b-91ae-364da2661108 | hg.openjdk.java.net | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| [security-announce] SUSE-SU-2013:1264-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Oracle Releases Updates for Javadoc and Other Java SE Vulnerabilities | US-CERT | af854a3a-2127-422b-91ae-364da2661108 | www.us-cert.gov | US Government Resource |
| [security-announce] SUSE-SU-2013:1305-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Gentoo Linux Documentation -- IcedTea JDK: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| '[security bulletin] HPSBUX02907 rev.1 - HP-UX Running Java7, Remote Unauthorized Access, Disclosure' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| '[security bulletin] HPSBUX02908 rev.1 - HP-UX Running Java6, Remote Unauthorized Access, Disclosure' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Oracle Java SE CVE-2013-2471 Buffer Overflow Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| [security-announce] SUSE-SU-2013:1256-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Support / Security / Advisories / / MDVSA-2013:183 | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Bug 975102 – CVE-2013-2471 OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248) | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| [security-announce] SUSE-SU-2013:1257-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.