Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via unspecified vectors related to JavaFX, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-java/sun-jdk.Upgrade dev-java/oracle-jdk-bin.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Mar 8, 2013 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Apr 16, 2013 | Mar 8, 2013 |
| Oracle Solaris | — | Upgrade runtime/java/jre to version 1.7.0.21-0.175.1.7.0.4.0 on Solaris 11.1Upgrade library/java/java-demo-7 to version 1.7.0.21-0.175.1.7.0.4.0 on Solaris 11.1Upgrade runtime/java/jre-7 to version 1.7.0.21-0.175.1.7.0.4.0 on Solaris 11.1Upgrade developer/java/jdk-7 to version 1.7.0.21-0.175.1.7.0.4.0 on Solaris 11.1 | May 29, 2017 | Mar 8, 2013 |
| Ubuntu | — | Upgrade openjdk-7 | Nov 19, 2024 | Mar 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub