Oracle Java SE JRE storeImageArray()代码执行漏洞

详细信息

漏洞类型

其他

漏洞描述

Oracle Java SE是美国甲骨文（Oracle）公司的一套标准版Java平台，用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。JRE组件是Java的运行时环境。Oracle Java Runtime Environment可能允许远程攻击者在系统上执行任意代码，这是由awt.dll中storeImageArray（）函数中的数组索引漏洞造成的。攻击者可以利用此漏洞，以受害者用户或目标应用程序进程的权限在系统上执行任意代码。

修复建议

有关补丁、升级或建议的解决方法信息，请参阅2013年6月的《Oracle Java SE关键补丁更新建议》： http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html

参考链接

• http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html

  NVD · x_refsource_CONFIRM

• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html

  NVD · vendor-advisory · x_refsource_SUSE

• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html

  NVD · vendor-advisory · x_refsource_SUSE

• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html

  NVD · vendor-advisory · x_refsource_SUSE

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880

  NVD · vendor-advisory · x_refsource_HP

• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html

  NVD · vendor-advisory · x_refsource_SUSE

• http://rhn.redhat.com/errata/RHSA-2013-1456.html

  NVD · vendor-advisory · x_refsource_REDHAT

• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html

  NVD · vendor-advisory · x_refsource_SUSE

• http://www.mandriva.com/security/advisories?name=MDVSA-2013:183

  NVD · vendor-advisory · x_refsource_MANDRIVA

• http://rhn.redhat.com/errata/RHSA-2013-1059.html

  NVD · vendor-advisory · x_refsource_REDHAT

• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html

  NVD · vendor-advisory · x_refsource_SUSE

• http://rhn.redhat.com/errata/RHSA-2013-0963.html

  NVD · vendor-advisory · x_refsource_REDHAT

• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html

  NVD · vendor-advisory · x_refsource_SUSE

• http://security.gentoo.org/glsa/glsa-201406-32.xml

  NVD · vendor-advisory · x_refsource_GENTOO

• http://rhn.redhat.com/errata/RHSA-2013-1455.html

  NVD · vendor-advisory · x_refsource_REDHAT

• http://marc.info/?l=bugtraq&m=137545505800971&w=2

  NVD · vendor-advisory · x_refsource_HP

• https://access.redhat.com/errata/RHSA-2014:0414

  NVD · vendor-advisory · x_refsource_REDHAT

• http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040

  NVD · x_refsource_MISC

• http://www-01.ibm.com/support/docview.wss?uid=swg21642336

  NVD · x_refsource_CONFIRM

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703

  NVD · vdb-entry · signature · x_refsource_OVAL

• http://advisories.mageia.org/MGASA-2013-0185.html

  NVD · x_refsource_CONFIRM

• http://rhn.redhat.com/errata/RHSA-2013-1081.html

  NVD · vendor-advisory · x_refsource_REDHAT

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074

  NVD · vdb-entry · signature · x_refsource_OVAL

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106

  NVD · vdb-entry · signature · x_refsource_OVAL

• http://rhn.redhat.com/errata/RHSA-2013-1060.html

  NVD · vendor-advisory · x_refsource_REDHAT

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455

  NVD · vdb-entry · signature · x_refsource_OVAL

• http://marc.info/?l=bugtraq&m=137545592101387&w=2

  NVD · vendor-advisory · x_refsource_HP

• https://bugzilla.redhat.com/show_bug.cgi?id=975118

  NVD · x_refsource_CONFIRM

• http://www.us-cert.gov/ncas/alerts/TA13-169A

  NVD · third-party-advisory · x_refsource_CERT

• https://osv.dev/vulnerability/DSA-2722-1

  OSV

• https://osv.dev/vulnerability/DSA-2727-1

  OSV

• https://www.vicarius.io/vsociety/posts/cve-2013-2465-detect-java-vulnerability

  NVD · Exploit · Third Party Advisory

• https://www.vicarius.io/vsociety/posts/cve-2013-2465-mitigate-java-vulnerability

  NVD · Exploit · Third Party Advisory

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2465

  NVD · US Government Resource