CVE-2013-2465

Summary

CVE-2013-2465 is a vulnerability affecting multiple versions of Oracle Java SE and OpenJDK, specifically Java Runtime Environment (JRE) components in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier. This issue, as disclosed in the June 2013 Critical Patch Update, allows remote attackers to impact confidentiality, integrity, and availability. The exact nature of the vulnerability remains unspecified, although there are unconfirmed claims that it involves unknown vectors related to 2D image handling. Oracle has not yet commented on these claims, which suggest the possibility of a Java sandbox bypass.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.