CVE ID:	CVE-2013-1491
Description:	The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2013.0835.3   1.3.6.1.4.1.25623.1.1.4.2013.0934.1   1.3.6.1.4.1.25623.1.1.4.2013.0835.2   1.3.6.1.4.1.25623.1.1.4.2013.0871.1   1.3.6.1.4.1.25623.1.1.4.2013.0871.2   1.3.6.1.4.1.25623.1.1.4.2013.0835.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1491 http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html Cert/CC Advisory: TA13-107A http://www.us-cert.gov/ncas/alerts/TA13-107A HPdes Security Advisory: HPSBUX02889 http://marc.info/?l=bugtraq&m=137283787217316&w=2 HPdes Security Advisory: HPSBUX02922 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 HPdes Security Advisory: SSRT101252 http://marc.info/?l=bugtraq&m=137283787217316&w=2 HPdes Security Advisory: SSRT101305 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/ https://twitter.com/thezdi/status/309438311112507392 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16663 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19482 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19553 RedHat Security Advisories: RHSA-2013:0757 http://rhn.redhat.com/errata/RHSA-2013-0757.html RedHat Security Advisories: RHSA-2013:0758 http://rhn.redhat.com/errata/RHSA-2013-0758.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html RedHat Security Advisories: RHSA-2013:1456 http://rhn.redhat.com/errata/RHSA-2013-1456.html SuSE Security Announcement: SUSE-SU-2013:0835 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html SuSE Security Announcement: SUSE-SU-2013:0871 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html SuSE Security Announcement: SUSE-SU-2013:0934 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html