Skip to content
OpenAdvisories
Unscored Public exploit CVE-2013-1493 EUVD-2013-1529GHSA-v3wr-hv3w-x2rj

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Up…

Published Mar 4, 2013 · Updated Aug 6, 2024 · Assigned by oracle

Description

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 java-1.5.0-ibm +6 1:1.5.0.16.0-1jpp.1.el6_4 RHSA-2013:0624
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.13.0-1jpp.3.el6_4 RHSA-2013:0625
RHEL 6 java-1.6.0-openjdk +4 1:1.6.0.0-1.57.1.11.9.el6_4 RHSA-2013:0605
RHEL 6 java-1.6.0-sun +5 1:1.6.0.43-1jpp.1.el6_4 RHSA-2013:0601
RHEL 6 java-1.7.0-ibm +5 1:1.7.0.4.0-1jpp.2.el6_4 RHSA-2013:0626
RHEL 6 java-1.7.0-openjdk +4 1:1.7.0.9-2.3.8.0.el6_4 RHSA-2013:0602
RHEL 6 java-1.7.0-oracle +5 1:1.7.0.17-1jpp.1.el6_4 RHSA-2013:0600
RHEL 5 java-1.5.0-ibm +7 1:1.5.0.16.0-1jpp.1.el5_9 RHSA-2013:0624
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.13.0-1jpp.2.el5_9 RHSA-2013:0625
RHEL 5 java-1.6.0-openjdk +4 1:1.6.0.0-1.36.1.11.9.el5_9 RHSA-2013:0604
RHEL 5 java-1.6.0-sun +5 1:1.6.0.43-1jpp.1.el5_9 RHSA-2013:0601
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.4.0-1jpp.2.el5_9 RHSA-2013:0626
RHEL 5 java-1.7.0-openjdk +4 1:1.7.0.9-2.3.8.0.el5_9 RHSA-2013:0603
RHEL 5 java-1.7.0-oracle +5 1:1.7.0.17-1jpp.1.el5_9 RHSA-2013:0600
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Network Satellite 5 java-1.6.0-ibm +1 1:1.6.0.14.0-1jpp.1.el5_9 RHSA-2013:1456, RHSA-2013:1455

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-1_7_0-openjdk 1.7.0.121-1.1 openSUSE-SU-2024:10534-1

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

Exploit-DB 1

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 12

References