![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2013-1490 |
Description: | Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431. NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors. NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.803306 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2013-1490 Bugtraq: 20130122 Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable (Google Search) http://www.securityfocus.com/archive/1/525387/30/0/threaded http://seclists.org/fulldisclosure/2013/Jan/142 http://seclists.org/fulldisclosure/2013/Jan/195 http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/ http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53 http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717 |