CVE-2013-1571
Medium
Description
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
SeverityMedium
CVSS4.3
Exploit probability—
Product
Oracle Javafx
PublishedJun 18, 2013
First seenJun 18, 2013
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle javafx | v ≤ 2.2.21, 2.0, 2.0.2, 2.0.3, 2.1, 2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.7 | — |
| oracle jdk | v ≤ 1.6.0, 1.6.0, v ≤ 1.7.0, 1.7.0, v ≤ 1.5.0, 1.5.0 | — |
| sun jdk | 1.6.0, 1.5.0 | — |
| oracle jre | v ≤ 1.5.0, 1.5.0, v ≤ 1.7.0, 1.7.0, v ≤ 1.6.0, 1.6.0 | — |
| sun jre | 1.5.0, 1.6.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.