CVE-2013-1488: CVE-2013-1488

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-1488

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Oracle Java 任意代码执行漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Oracle Java 7是Java 的下一个版本，也是SUN被oracle收购以后的第一个Java版本。 Oracle Java 7 Update 17版本以及其他版本中存在漏洞。通过包含的未明反映的向量，远程攻击者利用该漏洞执行任意代码。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2013-1488

#	POC Description	Source Link	Shenlong Link
1	PoC Java exploit based on http://www.contextis.com/research/blog/java-pwn2own/	https://github.com/v-p-b/buherablog-cve-2013-1488	POC Details

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2013-1488

Please Login to view more intelligence information

🔗 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/a19614a3dabbx_refsource_MISC
🔗 ERROR: The request could not be satisfiedx_refsource_MISC
🔗 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.htmlx_refsource_CONFIRM
🔗 http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/x_refsource_CONFIRM
🔗 http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/x_refsource_MISC
🔗 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124x_refsource_CONFIRM
🔗 https://bugzilla.redhat.com/show_bug.cgi?id=920247x_refsource_MISC
🔗 http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/x_refsource_CONFIRM
🔗 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130x_refsource_CONFIRM
🔗 Xx_refsource_MISC
🔗 http://www.us-cert.gov/ncas/alerts/TA13-107Athird-party-advisoryx_refsource_CERT
🔗 http://www.ubuntu.com/usn/USN-1806-1vendor-advisoryx_refsource_UBUNTU
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2013:145vendor-advisoryx_refsource_MANDRIVA
🔗 http://security.gentoo.org/glsa/glsa-201406-32.xmlvendor-advisoryx_refsource_GENTOO
🔗 http://rhn.redhat.com/errata/RHSA-2013-0757.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://rhn.redhat.com/errata/RHSA-2013-0752.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.htmlvendor-advisoryx_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.htmlvendor-advisoryx_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.htmlvendor-advisoryx_refsource_SUSE
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16511vdb-entrysignaturex_refsource_OVAL
🔗 http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.htmlmailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2013-1488

New Vulnerabilities

Product: n/a

Vendor: n/a

V. Comments for CVE-2013-1488

No comments yet

Support Us — Your donation helps us keep running

I. Basic Information for CVE-2013-1488

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2013-1488

III. Intelligence Information for CVE-2013-1488

New Vulnerabilities

V. Comments for CVE-2013-1488

Leave a comment