Mission and Overview
Resource Status
NVD contains:

Last updated: 7/10/2014 11:17:30 AM

CVE Publication rate: 18.4

Email List


Workload Index
Vulnerability Workload Index: 8.26
About Us

National Cyber Awareness System

Vulnerability Summary for CVE-2013-0422

Original release date: 01/10/2013
Last revised: 02/20/2014




CVSS Severity (version 2.0):
Impact Subscore: 10.0
Exploitability Subscore: 10.0
CVSS Version 2 Metrics:
Access Complexity: Low
Authentication: Not required to exploit
Per: http://www.oracle.com/technetwork/java/javase/downloads/jdk7-downloads-1880260.html 'Note: JDK and JRE 6, 5.0 and 1.4.2, and Java SE Embedded JRE releases are not affected.'

References to Advisories, Solutions, and Tools


External Source: MISC
US-CERT Vulnerability Note: CERT-VN
Name: VU#625617
External Source: MISC
Name: http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/
External Source: MISC
Name: http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/
External Source: SUSE
Name: openSUSE-SU-2013:0199
External Source: UBUNTU
Name: USN-1693-1
External Source: MISC
Name: https://www-304.ibm.com/connections/blogs/PSIRT/entry/oracle_java_7_security_manager_bypass_vulnerability_cve_2013_04224?lang=en_us
External Source: REDHAT
Name: RHSA-2013:0156
External Source: MISC
External Source: MISC
Name: http://immunityproducts.blogspot.ca/2013/01/confirmed-java-only-fixed-one-of-two.html
External Source: BUGTRAQ
Name: 20130110 [SE-2012-01] 'Fix' for Issue 32 exploited by new Java 0-day code
External Source: MANDRIVA
Name: MDVSA-2013:095
External Source: MISC
Name: https://partners.immunityinc.com/idocs/Java%20MBeanInstantiator.findClass%200day%20Analysis.pdf
External Source: CONFIRM
Name: http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html
External Source: CONFIRM
External Source: MISC
Name: https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013
External Source: REDHAT
Name: RHSA-2013:0165
External Source: MISC
Name: http://blog.fireeye.com/research/2013/01/happy-new-year-from-new-java-zero-day.html
US-CERT Vulnerability Note: CERT
Name: TA13-010A

Technical Details

Vulnerability Type (View All)