## https://sploitus.com/exploit?id=SAINT:95FFF6793FF19509924D6AF152CDEE79
Added: 04/04/2013
CVE: [CVE-2013-1493](<https://vulners.com/cve/CVE-2013-1493>)
BID: [58238](<http://www.securityfocus.com/bid/58238>)
OSVDB: [90737](<http://www.osvdb.org/90737>)
### Background
The Java Runtime Environment (JRE) is part of the Java Development Kit (JDK), a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java application; it consists of the Java Virtual Machine (JVM), core classes, and supporting files.
### Problem
A memory overwrite vulnerability in the Color Management code in the JVM process allows command execution when a specially crafted JAR file is opened.
### Resolution
[Upgrade](<http://www.oracle.com/technetwork/java/javase/downloads/index.html>) to a version higher than JRE 7 Update 15, JRE 6 Update 41, or JRE 5.0 Update 40.
### References
<http://www.kb.cert.org/vuls/id/688246>
### Limitations
Exploit works on JRE 7 Update 15 and requires a user to open the exploit page in a browser.
### Platforms
Windows