CVE-2013-2458
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via "an error related to method handles."
- Affected products
- Centos, Hp-Ux, Java Platform, Java Runtime Environment, Openjdk, Red Hat, Suse
- Oracle Jre
- ≤ 1.7.0
- Fix
- Available
- CVSS 2.0
- 5.8 MEDIUM
- EPSS
- 4.1% (90th percentile)
- NVD status
- Modified
- Published
- 2013-06-18
CVE-2013-2458 at NVD
No indexed exploits for CVE-2013-2458 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2013-2458 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.