CVE-2013-2467

MEDIUM

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 5.0 Update 45 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Java installer.

References

http://marc.info/?l=bugtraq&m=137545505800971&w=2

http://secunia.com/advisories/54154

http://www-01.ibm.com/support/docview.wss?uid=swg21644197

http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html

http://www.us-cert.gov/ncas/alerts/TA13-169A

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17014

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19512

Details

Source: MITRE

Published: 2013-06-18

Updated: 2017-09-19

Risk Information

CVSS v2.0

Base Score: 6.9

Vector: (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Impact Score: 10

Exploitability Score: 3.4

Severity: MEDIUM