CVE-2013-4578
Medium
Description
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.
SeverityMedium
CVSS5.3
Exploit probability85. percentile2.5%
Product
Oracle Jdk
PublishedDec 29, 2017
First seenDec 29, 2017
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | 1.7.0, v ≤ 1.7.0 | — |
| oracle jre | 1.7.0, v ≤ 1.7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.