CVE-2013-1489

Publication date 31 January 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.

Read the notes from the security team

Status

Package Ubuntu Release Status
openjdk-7 12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

Notes

mdeslaur

in lucid+, NetX and the plugin moved to the icedtea-web package

jdstrand

openjdk-6b18 FTBFS on 11.04 (LP: #1043003) Windows-only

References

Other references