Homepage

CVE-2013-1489 The advisory has been revoked - it doesn't affect any version of package openjdk-7  (opens in a new tab)

Threat Intelligence

EPSS
7.64% (94th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1204-OPENJDK7-638443
  • published10 Sept 2020
  • disclosed31 Jan 2013
Report a new vulnerability Found a mistake?

Introduced: 31 Jan 2013

CVE-2013-1489  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:12.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream openjdk-7 package and not the openjdk-7 package as distributed by Ubuntu.

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.

References