CVE-2013-2434

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-17 · updated 2026-06-16

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Affected products

Oracle Javafx: through 2.2.7; 2.0, 2.0.2, 2.0.3, 2.1, 2.2, 2.2.3 (+2)
Oracle Java SE: through 1.7.0; 1.7.0, 1.7.0-update1, 1.7.0-update10, 1.7.0-update11, 1.7.0-update13, 1.7.0-update15 (+7)
Oracle Java SE: through 1.7.0; 1.7.0, 1.7.0-update1, 1.7.0-update10, 1.7.0-update11, 1.7.0-update13, 1.7.0-update15 (+7)

References

http://marc.info/?l=bugtraq&m=137283787217316&w=2
http://rhn.redhat.com/errata/RHSA-2013-0757.html
http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
http://www.us-cert.gov/ncas/alerts/TA13-107A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16201
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19462
http://marc.info/?l=bugtraq&m=137283787217316&w=2
http://rhn.redhat.com/errata/RHSA-2013-0757.html
http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
http://www.us-cert.gov/ncas/alerts/TA13-107A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16201
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19462

Get alerted when CVE-2013-2434 or the next vulnerability affects your stack