CVE-2013-0448

Published: 1 February 2013

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect integrity via unknown vectors related to Libraries.

Notes

http://rhn.redhat.com/errata/RHSA-2013-0237.html states this is
Oracle JDK only, but based on Oracle advisory we claimed it was fixed in
https://ubuntu.com/security/notices/USN-1724-1.

Status

References

• http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
• http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-February/021708.html
• http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-February/021728.html
• https://ubuntu.com/security/notices/USN-1724-1
• https://www.cve.org/CVERecord?id=CVE-2013-0448
• NVD
• Launchpad
• Debian