Oracle Java SE Critical Patch Update June 2013 Advance Notification

BID:60556

Info

Oracle Java SE Critical Patch Update June 2013 Advance Notification

Bugtraq ID: 60556
Class: Unknown
CVE:
Remote: Yes
Local: No
Published: Jun 13 2013 12:00AM
Updated: Jun 13 2013 12:00AM
Credit: Oracle
Vulnerable: Sun JRE (Windows Production Release) 1.7.0_4
Sun JRE (Windows Production Release) 1.7.0_2
Sun JRE (Windows Production Release) 1.6.0_32
Sun JRE (Windows Production Release) 1.6.0_30
Sun JRE (Windows Production Release) 1.6.0_28
Sun JRE (Windows Production Release) 1.6.0_27
Sun JRE (Windows Production Release) 1.6.0_26
Sun JRE (Windows Production Release) 1.6.0_25
Sun JRE (Windows Production Release) 1.6.0_24
Sun JRE (Windows Production Release) 1.6.0_23
Sun JRE (Windows Production Release) 1.6.0_22
Sun JRE (Linux Production Release) 1.7.0_4
Sun JRE (Linux Production Release) 1.7.0_2
Sun JRE (Linux Production Release) 1.6.0_32
Sun JRE (Linux Production Release) 1.6.0_30
Sun JRE (Linux Production Release) 1.6.0_28
Sun JRE (Linux Production Release) 1.6.0_27
Sun JRE (Linux Production Release) 1.6.0_26
Sun JRE (Linux Production Release) 1.6.0_25
Sun JRE (Linux Production Release) 1.6.0_24
Sun JRE (Linux Production Release) 1.6.0_23
Sun JRE (Linux Production Release) 1.6.0_22
Not Vulnerable:

Discussion

RETIRED: Oracle Java SE Critical Patch Update June 2013 Advance Notification

On June 18, 2013, Oracle will release an advisory addressing 40 vulnerabilities affecting Java SE. A total of 37 of these vulnerabilities can be exploited remotely without authentication. The highest CVSS 2.0 base score for these vulnerabilities is 10.

The following products are affected:

JDK and JRE 7 Update 21 and earlier for Windows, Solaris, and Linux
JDK and JRE 6 Update 45 and earlier for Windows, Solaris, and Linux
JDK and JRE 5.0 Update 45 and earlier for Windows, Solaris, and Linux
JavaFX 2.2.21 and earlier for Windows, Solaris, and Linux

This BID is being retired. The following individual records exist to better document the issues:

60658 Oracle Java SE CVE-2013-2469 Remote Security Vulnerability
60659 Oracle Java SE CVE-2013-2471 Remote Security Vulnerability
60656 Oracle Java SE CVE-2013-2472 Remote Security Vulnerability
60657 Oracle Java SE CVE-2013-2465 Remote Security Vulnerability
60653 Oracle Java SE CVE-2013-2407 Remote Security Vulnerability
60641 Oracle Java SE CVE-2013-2456 Remote Security Vulnerability
60655 Oracle Java SE CVE-2013-2463 Remote Security Vulnerability
60654 Oracle Java SE CVE-2013-3744 Remote Security Vulnerability
60652 Oracle Java SE CVE-2013-2458 Remote Security Vulnerability
60649 Oracle Java SE CVE-2013-2467 Remote Security Vulnerability
60651 Oracle Java SE CVE-2013-2470 Remote Security Vulnerability
60645 Oracle Java SE CVE-2013-2461 Remote Security Vulnerability
60643 Oracle Java SE CVE-2013-2442 Remote Security Vulnerability
60638 Oracle Java SE CVE-2013-2450 Remote Security Vulnerability
60650 Oracle Java SE CVE-2013-2454 Remote Security Vulnerability
60647 Oracle Java SE CVE-2013-2459 Remote Security Vulnerability
60646 Oracle Java SE CVE-2013-2443 Remote Security Vulnerability
60644 Oracle Java SE CVE-2013-2453 Remote Security Vulnerability
60639 Oracle Java SE CVE-2013-2445 Remote Security Vulnerability
60640 Oracle Java SE CVE-2013-2448 Remote Security Vulnerability
60632 Oracle Java SE CVE-2013-2457 Remote Security Vulnerability
60637 Oracle Java SE CVE-2013-2468 Remote Security Vulnerability
60636 Oracle Java SE CVE-2013-2437 Remote Security Vulnerability
60634 Oracle Java SE CVE-2013-1571 Remote Security Vulnerability
60629 Oracle Java SE CVE-2013-2447 Remote Security Vulnerability
60635 Oracle Java SE CVE-2013-2460 Remote Security Vulnerability
60630 Oracle Java SE CVE-2013-2462 Remote Security Vulnerability
60620 Oracle Java SE CVE-2013-2446 Remote Security Vulnerability
60627 Oracle Java SE CVE-2013-1500 Remote Security Vulnerability
60631 Oracle Java SE CVE-2013-2464 Remote Security Vulnerability
60626 Oracle Java SE CVE-2013-3743 Remote Security Vulnerability
60633 Oracle Java SE CVE-2013-2444 Remote Security Vulnerability
60625 Oracle Java SE CVE-2013-2451 Remote Security Vulnerability
60621 Oracle Java SE CVE-2013-2400 Remote Security Vulnerability
60619 Oracle Java SE CVE-2013-2455 Remote Security Vulnerability
60624 Oracle Java SE CVE-2013-2466 Remote Security Vulnerability
60623 Oracle Java SE CVE-2013-2473 Remote Security Vulnerability
60622 Oracle Java SE CVE-2013-2449 Remote Security Vulnerability
60618 Oracle Java SE CVE-2013-2412 Remote Security Vulnerability
60617 Oracle Java SE CVE-2013-2452 Remote Security Vulnerability

Exploit / POC

Oracle Java SE Critical Patch Update June 2013 Advance Notification

Some of these issues may be trivial to exploit and may not require explicit exploit code.

Solution / Fix

Oracle Java SE Critical Patch Update June 2013 Advance Notification

Solution:
Oracle will be releasing updates on June 18, 2013. Please see the references or vendor advisory for more information.

References

RETIRED: Oracle Java SE Critical Patch Update June 2013 Advance Notification

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report