## https://sploitus.com/exploit?id=SAINT:F1E892EBF35455788EDC65472ED0C939
Added: 07/11/2013
CVE: [CVE-2013-2460](<https://vulners.com/cve/CVE-2013-2460>)
BID: [60635](<http://www.securityfocus.com/bid/60635>)
OSVDB: [94346](<http://www.osvdb.org/94346>)
### Background
Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets.
### Problem
A vulnerability in the Serviceability subcomponent of Java Runtime Environment could allow a remote attacker to execute arbitrary code if a user is tricked into opening a web page with a specially crafted applet. Oracle JRE 7 Update 21 and earlier are vulnerable.
### Resolution
Apply patches as directed in [Oracle Java SE Critical Patch Update Advisory - June 2013](<http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html>).
### References
<http://www.oracle.com/technetwork/topics/security/javacpujun2013verbose-1899853.html>
### Limitations
This exploit has been tested against Oracle JRE 7 Update 21 on Windows XP SP3 English (DEP OptIn) and Windows 7 SP1 (DEP OptIn).
The user must open the exploit using Internet Explorer on Windows.
### Platforms
Windows