Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Oracle Java Unspecified Code Execution Vulnerability

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Vulnerabilities

See the original Secunia advisory:
Oracle Java Unspecified Code Execution Vulnerability

Secunia Oracle Java Unspecified Code Execution Vulnerability
Secunia Official 14th Jan, 2013 04:30
Ranking: 0
Posts: 0
User Since: -
System Score: -
Location: Copenhagen, DK
A vulnerability has been discovered in Oracle Java, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error. No further information is currently available.

NOTE: This is currently being actively exploited.

The vulnerability is confirmed in version 7 update 10 build 1.7.0_10-b18. Other versions may also be affected.

stuartberman RE: Oracle Java Unspecified Code Execution Vulnerability
Member 14th Jan, 2013 04:30
Score: 1
Posts: 2
User Since: 14th Jan 2013
System Score: N/A
Location: US
Last edited on 14th Jan, 2013 04:30
Does Java 7 Update 11 (released a few hours ago by Oracle) fix this vulnerability?
Was this reply relevant?
+1
-0
Lanan_Makz RE: Oracle Java Unspecified Code Execution Vulnerability
Member 14th Jan, 2013 08:46
Score: -21
Posts: 22
User Since: 15th Jun 2011
System Score: N/A
Location: UA
Yes, Oracle says CVE-2013-0422 is fixed by this patch

https://blogs.oracle.com/java/entry/java_vulnerabi...
Was this reply relevant?
+2
-0
carrela RE: Oracle Java Unspecified Code Execution Vulnerability
Member 14th Jan, 2013 14:09
Score: 0
Posts: 1
User Since: 2nd Dec 2011
System Score: N/A
Location: CH
Hi,

When will Secunia put this update in the CSI console ?
Thank you
Was this reply relevant?
+0
-0
stuartberman RE: Oracle Java Two Code Execution Vulnerabilities
Member 14th Jan, 2013 15:57
Score: 1
Posts: 2
User Since: 14th Jan 2013
System Score: N/A
Location: US
Last edited on 14th Jan, 2013 15:57
Does Java 7 Update 11 (released a few hours ago by Oracle) fix this vulnerability?
Was this reply relevant?
+0
-0
RicGibson RE: Oracle Java Unspecified Code Execution Vulnerability
Member 14th Jan, 2013 17:15
Score: 0
Posts: 2
User Since: 25th Feb 2011
System Score: N/A
Location: N/A
I have scanned twice, and Secunia still hasn't picked up the Java Update.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Oracle Java Unspecified Code Execution Vulnerability
Handling Contributor 15th Jan, 2013 12:35
Score: 11785
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
JAVA is showing perfectly on my test PC - Windows XP SP3 & can been seen within xSI.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
jschling7 RE: Oracle Java Two Code Execution Vulnerabilities
Member 3rd Feb, 2013 01:27
Score: 6
Posts: 2
User Since: 4th Mar 2010
System Score: N/A
Location: N/A
Last edited on 3rd Feb, 2013 01:36
a little bid disappointing that the Security Scan of PSI 2.0 does not find any outdated program some minutes ago while Java 7 update 11 32 + 64bit is installed on Windows 7, but the Oracle Java webpage currently shows update-version 13 for download :-((
both Java versions (32+64bit) are shown within the Scan result page with detected version 7.0.110.21 + install solution "Up-to-date (AU)"
http://java.com/de/download/index.jsp

PS: after installing update manually and re-scanning both Java versions with PSI the detected version is shown as 7.0.130.20 and status still "Up-to-date (AU)"
Was this reply relevant?
+1
-0
Cyclops2013 RE: Oracle Java Two Code Execution Vulnerabilities
Member 4th Feb, 2013 19:20
Score: 0
Posts: 1
User Since: 4th Feb 2013
System Score: N/A
Location: FM
Last edited on 4th Feb, 2013 19:20
Thanks for this alert.....
Was this reply relevant?
+0
-0


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer