CVE-2013-1500

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.

Risk Information

Base Score

6.1

MODERATE

Vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS Score

Exploitation Probability

0.088

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Java jdk (x64) 7.0(x64)	Windows
Multiple vulnerabilities affected in Java jdk 7.0	Windows
Multiple vulnerabilities affected in Java jre (x64) 7.0(x64)	Windows
Multiple vulnerabilities affected in Java jre 7.0	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.2.2	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.2.3	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.2.0	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.2.1	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.3.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234