CVE-2013-1500

Priority
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0
Update 45 and earlier, and OpenJDK 7, allows local users to affect
confidentiality and integrity via unknown vectors related to 2D. NOTE: the
previous information is from the June 2013 CPU. Oracle has not commented on
claims from another vendor that this issue is related to weak permissions
for shared memory.
Assigned-to
jdstrand
Notes
mdeslaurin lucid+, NetX and the plugin moved to the icedtea-web package
jdstrandsun-java6 is not redistributable, no longer in the archive and
no longer tracked
sun-java5 is EOL upstream and no longer tracked
as of 2013-06-19, upstream IcedTea updates are not available
updates break the icedtea-web plugin and it will need this fix:
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-June/023745.html
Package
Upstream:pending (6b27-1.12.6)
Package
Upstream:needs-triage
Package
Upstream:pending (2.3.10)
More Information

Updated: 2020-03-18 22:11:51 UTC (commit 2ea7df7bd1e69e1e489978d2724a936eb3faa1b8)