CVE ID:	CVE-2013-5907
Description:	Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2014.0246.1   1.3.6.1.4.1.25623.1.0.850831   1.3.6.1.4.1.25623.1.1.4.2014.0266.2   1.3.6.1.4.1.25623.1.1.4.2014.0266.1   1.3.6.1.4.1.25623.1.1.4.2014.0266.3
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5907 BugTraq ID: 64758 http://www.securityfocus.com/bid/64758 BugTraq ID: 64894 http://www.securityfocus.com/bid/64894 HPdes Security Advisory: HPSBUX02972 http://marc.info/?l=bugtraq&m=139402697611681&w=2 HPdes Security Advisory: HPSBUX02973 http://marc.info/?l=bugtraq&m=139402749111889&w=2 HPdes Security Advisory: SSRT101454 http://marc.info/?l=bugtraq&m=139402697611681&w=2 HPdes Security Advisory: SSRT101455 http://marc.info/?l=bugtraq&m=139402749111889&w=2 http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1 http://osvdb.org/101995 RedHat Security Advisories: RHSA-2014:0026 http://rhn.redhat.com/errata/RHSA-2014-0026.html RedHat Security Advisories: RHSA-2014:0027 http://rhn.redhat.com/errata/RHSA-2014-0027.html RedHat Security Advisories: RHSA-2014:0030 http://rhn.redhat.com/errata/RHSA-2014-0030.html RedHat Security Advisories: RHSA-2014:0097 http://rhn.redhat.com/errata/RHSA-2014-0097.html RedHat Security Advisories: RHSA-2014:0134 http://rhn.redhat.com/errata/RHSA-2014-0134.html RedHat Security Advisories: RHSA-2014:0135 http://rhn.redhat.com/errata/RHSA-2014-0135.html RedHat Security Advisories: RHSA-2014:0136 http://rhn.redhat.com/errata/RHSA-2014-0136.html RedHat Security Advisories: RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0414 http://www.securitytracker.com/id/1029608 http://secunia.com/advisories/56432 http://secunia.com/advisories/56485 http://secunia.com/advisories/56486 http://secunia.com/advisories/56487 http://secunia.com/advisories/56535 SuSE Security Announcement: SUSE-SU-2014:0246 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html SuSE Security Announcement: SUSE-SU-2014:0266 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html SuSE Security Announcement: SUSE-SU-2014:0451 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html SuSE Security Announcement: openSUSE-SU-2014:0174 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html SuSE Security Announcement: openSUSE-SU-2014:0177 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html SuSE Security Announcement: openSUSE-SU-2014:0180 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html http://www.ubuntu.com/usn/USN-2089-1 http://www.ubuntu.com/usn/USN-2124-1