CVE-2013-5907: CVE-2013-5907

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-5907

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Oracle Java SE 远程安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Oracle Java SE和JRockit都是美国甲骨文（Oracle）公司的产品。Java SE（Java 平台标准版）用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。JRockit是一款内置于Oracle融合中间件中的Java虚拟机。 Oracle Java SE中的Java SE，JRockit及Java SE Embedded组件中的2D子组件存在安全漏洞。远程攻击者可利用该漏洞执行任意代码，影响数据的保密性，完整性及可用性。以下版本受到影响：Oracle Java SE

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2013-5907

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2013-5907

Please Login to view more intelligence information

🔗 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777x_refsource_CONFIRM
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1x_refsource_MISC
🔗 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlx_refsource_CONFIRM
🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1052915x_refsource_CONFIRM
🔗 http://www.securityfocus.com/bid/64894vdb-entryx_refsource_BID
🔗 http://secunia.com/advisories/56432third-party-advisoryx_refsource_SECUNIA
🔗 http://secunia.com/advisories/56485third-party-advisoryx_refsource_SECUNIA
🔗 http://secunia.com/advisories/56486third-party-advisoryx_refsource_SECUNIA
🔗 http://secunia.com/advisories/56535third-party-advisoryx_refsource_SECUNIA
🔗 http://www.securityfocus.com/bid/64758vdb-entryx_refsource_BID
http://secunia.com/advisories/56487third-party-advisoryx_refsource_SECUNIA
🔗 http://osvdb.org/101995vdb-entryx_refsource_OSVDB
🔗 http://www.securitytracker.com/id/1029608vdb-entryx_refsource_SECTRACK
🔗 http://www.ubuntu.com/usn/USN-2124-1vendor-advisoryx_refsource_UBUNTU
🔗 http://marc.info/?l=bugtraq&m=139402749111889&w=2vendor-advisoryx_refsource_HP
🔗 http://marc.info/?l=bugtraq&m=139402697611681&w=2vendor-advisoryx_refsource_HP
🔗 USN-2089-1: OpenJDK 7 vulnerabilities | Ubuntu security notices | Ubuntu Read full article vendor-advisoryx_refsource_UBUNTU
🔗 http://rhn.redhat.com/errata/RHSA-2014-0136.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://rhn.redhat.com/errata/RHSA-2014-0030.htmlvendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2014-0026.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://rhn.redhat.com/errata/RHSA-2014-0097.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://rhn.redhat.com/errata/RHSA-2014-0027.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://rhn.redhat.com/errata/RHSA-2014-0134.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://rhn.redhat.com/errata/RHSA-2014-0135.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.htmlvendor-advisoryx_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.htmlvendor-advisoryx_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.htmlvendor-advisoryx_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.htmlvendor-advisoryx_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.htmlvendor-advisoryx_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.htmlvendor-advisoryx_refsource_SUSE
https://nvd.nist.gov/vuln/detail/CVE-2013-5907

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2013-5907

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2013-5907

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2013-5907

III. Intelligence Information for CVE-2013-5907

IV. Related Vulnerabilities

V. Comments for CVE-2013-5907

Leave a comment