Mac OS X : Java for Mac OS X 10.6 Update 14

This script is Copyright (C) 2013 Tenable Network Security, Inc.

Synopsis :

The remote host has a version of Java that is affected by multiple

Description :

The remote Mac OS X host has a version of Java for Mac OS X 10.6 that
is missing Update 14, which updates the Java version to 1.6.0_43. It
is, therefore, affected by two security vulnerabilities, the most
serious of which may allow an untrusted Java applet to execute arbitrary
code with the privileges of the current user outside the Java sandbox.

Note that an exploit for CVE-2013-1493 has been observed in the wild.

See also :

Solution :

Upgrade to Java for Mac OS X 10.6 Update 14, which includes version
13.9.3 of the JavaVM Framework.

Risk factor :

High / CVSS Base Score : 9.3
CVSS Temporal Score : 8.1
Public Exploit Available : true

Family: MacOS X Local Security Checks

Nessus Plugin ID: 65027 ()

Bugtraq ID: 58238

CVE ID: CVE-2013-0809