CVE-2013-0402

Currently unrated

Key Information:

Vendor
Oracle
Status
Javafx
Vendor
CVE Published:
8 March 2013

Summary

Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via unspecified vectors related to JavaFX, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.

References

https://twitter.com/thezdi/status/309484730506698752
x_refsource_MISC
http://www.us-cert.gov/ncas/alerts/TA13-107A
third-party-advisoryx_refsource_CERT
http://rhn.redhat.com/errata/RHSA-2013-0757.html
vendor-advisoryx_refsource_REDHAT

EPSS Score

51% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.