The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk6. | Nov 8, 2019 | Mar 5, 2013 |
| Apple Java | — | Upgrade to Apple Java version 1.6.0.43 | Mar 15, 2013 | Mar 5, 2013 |
| Centos_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-devel | Dec 1, 2016 | Mar 5, 2013 |
| Gentoo Linux | — | Upgrade dev-java/sun-jdk.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/icedtea-bin.Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Mar 5, 2013 |
| Hpux | — | Update Jre60.JRE60-IPF64 to the latest versionUpdate Jre60.JRE60-IPF32 to the latest versionUpdate Jre60.JRE60-PA20 to the latest versionUpdate Jre60.JRE60-IPF64-HS to the latest versionUpdate Jdk15.JDK15-COM to the latest versionUpdate Jre15.JRE15-COM-DOC to the latest versionUpdate Jre15.JRE15-IPF64 to the latest versionUpdate Jre70.JRE70-COM to the latest versionUpdate Jdk15.JDK15-DEMO to the latest versionUpdate Jre15.JRE15-PA20 to the latest versionUpdate Jre15.JRE15-PA20-HS to the latest versionUpdate Jre60.JRE60-IPF32-HS to the latest versionUpdate Jdk70.JDK70-IPF64 to the latest versionUpdate Jdk60.JDK60-PA20 to the latest versionUpdate Jdk70.JDK70-COM to the latest versionUpdate Jdk15.JDK15-IPF64 to the latest versionUpdate Jdk70.JDK70-DEMO to the latest versionUpdate Jdk70.JDK70-IPF32 to the latest versionUpdate Jdk15.JDK15-PA20W to the latest versionUpdate Jre15.JRE15-PA20W-HS to the latest versionUpdate Jdk15.JDK15-PA20 to the latest versionUpdate Jre60.JRE60-COM-DOC to the latest versionUpdate Jdk15.JDK15-IPF32 to the latest versionUpdate Jre15.JRE15-PA20W to the latest versionUpdate Jre15.JRE15-IPF32 to the latest versionUpdate Jdk60.JDK60-COM to the latest versionUpdate Jre15.JRE15-IPF64-HS to the latest versionUpdate Jre60.JRE60-PA20-HS to the latest versionUpdate Jre70.JRE70-IPF32-HS to the latest versionUpdate Jdk60.JDK60-IPF32 to the latest versionUpdate Jre70.JRE70-IPF32 to the latest versionUpdate Jre60.JRE60-COM to the latest versionUpdate Jre15.JRE15-COM to the latest versionUpdate Jdk60.JDK60-IPF64 to the latest versionUpdate Jre60.JRE60-PA20W-HS to the latest versionUpdate Jre60.JRE60-PA20W to the latest versionUpdate Jdk60.JDK60-PA20W to the latest versionUpdate Jre70.JRE70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF64-HS to the latest versionUpdate Jre15.JRE15-IPF32-HS to the latest version | Aug 11, 2017 | Mar 5, 2013 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Mar 5, 2013 | Mar 5, 2013 |
| Oracle Solaris | — | Upgrade SUNWj6dev to version 1.6.0.43-0.175.1.5.0.5.0 on Solaris 11.1Upgrade runtime/java/jre-7 to version 1.7.0.17-0.175.1.5.0.5.0 on Solaris 11.1Upgrade developer/java/jdk-7 to version 1.7.0.17-0.175.1.5.0.5.0 on Solaris 11.1Upgrade SUNWj6rt to version 1.6.0.43-0.175.1.5.0.5.0 on Solaris 11.1Upgrade library/java/java-demo-6 to version 1.6.0.43-0.175.1.5.0.5.0 on Solaris 11.1Upgrade runtime/java/jre to version 1.7.0.17-0.175.1.5.0.5.0 on Solaris 11.1Upgrade library/java/java-demo-7 to version 1.7.0.17-0.175.1.5.0.5.0 on Solaris 11.1Upgrade runtime/java/jre-6 to version 1.6.0.43-0.175.1.5.0.5.0 on Solaris 11.1Upgrade developer/java/jdk-6 to version 1.6.0.43-0.175.1.5.0.5.0 on Solaris 11.1Upgrade runtime/java to version 1.6.0.43-0.175.1.5.0.5.0 on Solaris 11.1 | May 29, 2017 | Mar 5, 2013 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk | Oct 16, 2024 | Mar 4, 2013 |
| Suse | — | Upgrade java-1_5_0-ibm-alsa-32bitUpgrade java-1_6_0-openjdk-devel-debuginfoUpgrade java-1_5_0-ibm-64bitUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-openjdkUpgrade java-1_6_0-ibm-devel-32bitUpgrade java-1_5_0-ibm-srcUpgrade java-1_5_0-ibm-pluginUpgrade java-1_4_2-ibmUpgrade java-1_6_0-openjdk-demoUpgrade java-1_6_0-ibm-alsa-32bitUpgrade java-1_5_0-ibm-devel-32bitUpgrade java-1_6_0-ibm-pluginUpgrade java-1_5_0-ibm-develUpgrade java-1_5_0-ibm-alsaUpgrade java-1_6_0-ibm-64bitUpgrade java-1_7_0-openjdk-demoUpgrade java-1_6_0-ibm-alsaUpgrade java-1_4_2-ibm-jdbcUpgrade java-1_4_2-ibm-pluginUpgrade java-1_7_0-openjdk-develUpgrade java-1_6_0-openjdk-debugsourceUpgrade java-1_5_0-ibm-fontsUpgrade java-1_7_0-openjdkUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-openjdk-develUpgrade java-1_4_2-ibm-develUpgrade java-1_6_0-openjdk-javadocUpgrade java-1_6_0-ibm-develUpgrade java-1_6_0-ibm-plugin-32bitUpgrade java-1_6_0-ibmUpgrade java-1_6_0-openjdk-debuginfoUpgrade java-1_6_0-openjdk-srcUpgrade java-1_6_0-ibm-32bitUpgrade java-1_5_0-ibmUpgrade java-1_5_0-ibm-jdbcUpgrade java-1_7_0-openjdk-srcUpgrade java-1_5_0-ibm-demoUpgrade java-1_6_0-openjdk-demo-debuginfoUpgrade java-1_5_0-ibm-32bitUpgrade java-1_7_0-openjdk-javadoc | Feb 17, 2015 | Mar 5, 2013 |
| Ubuntu | — | Upgrade openjdk-7-jre-headlessUpgrade openjdk-7-jre-zeroUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-jre-libUpgrade openjdk-6-jreUpgrade icedtea-7-jre-jamvmUpgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jre-headlessUpgrade openjdk-7-jre-libUpgrade openjdk-7-jreUpgrade icedtea-7-jre-cacaoUpgrade openjdk-6-jre-zero | Nov 8, 2024 | Mar 5, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub