10 - VU#688246

Executive Summary

Summary
Title	Java contains multiple vulnerabilities

Informations
Name	VU#688246	First vendor Publication	2013-03-05
Vendor	VU-CERT	Last vendor Modification	2013-03-05
Severity (Vendor)	N/A	Revision	M

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability Note VU#688246

Java contains multiple vulnerabilities

Original Release date: 05 Mar 2013 | Last revised: 05 Mar 2013

Overview

Java 7 Update 15, Java 6 Update 41, Java 5.0 Update 40, and earlier versions of Java contain a vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

Description

The Oracle Java Runtime Environment (JRE) allows users to run Java applications in a browser or as standalone programs. Oracle has made the JRE available for multiple operating systems. OpenJDK is an open-source implementation of the Java platform, and the IcedTea project aims to make it easier to deploy OpenJDK, including a web browser plugin.

Additional details of the vulnerability can be found at FireEye Malware Intelligence Lab blog post.

This vulnerability is reportedly being exploited in the wild.

Impact

By convincing a user to visit a specially crafted HTML document, a remote attacker may be able to execute arbitrary code on a vulnerable system. Note that applications that use the Internet Explorer web content rendering components, such as Microsoft Office or Windows Desktop Search, may also be used as an attack vector for these vulnerabilities.

Solution

Apply an update

These issues are addressed in Java 7 Update 17 and Java 6 Update 43. Please see the Oracle Security Alert for CVE-2013-1493 for more details.

Unless it is absolutely necessary to run Java in web browsers, disable it as described below, even after updating to 7u17. This will help mitigate other Java vulnerabilities that may be discovered in the future.

This issue has also been addressed in IcedTea versions 1.11.9 and 1.12.4.

Disable Java in web browsers
Starting with Java 7 Update 10, it is possible to disable Java content in web browsers through the Java control panel applet. Please see the Java documentation for more details.

Note: Due to what appears to potentially be a bug in the Java installer, the Java Control Panel applet may be missing on some Windows systems. In such cases, the Java Control Panel applet may be launched by finding and executing javacpl.exe manually. This file is likely to be found in C:\Program Files\Java\jre7\bin or C:\Program Files (x86)\Java\jre7\bin.

Also note that we have encountered situations on Windows where Java will crash if it has been disabled in the web browser as described above and then subsequently re-enabled. Depending on the browser used, this Michael Horowitz has pointed out that performing the same steps on Windows 7 will result in unsigned Java applets executing without prompting in Internet Explorer, despite what the "Security Level" slider in the Java Control panel applet is configured to use. We have confirmed this behavior with Internet Explorer on both Windows 7 and Vista. Reinstalling Java appears to correct both of these situations.

System administrators wishing to deploy Java 7 Update 10 or later with the "Enable Java content in the browser" feature disabled can invoke the Java installer with the WEB_JAVA=0 command-line option. More details are available in the Java documentation.

Restrict access to Java applets

Network administrators unable to disable Java in web browsers may be able to help mitigate this and other Java vulnerabilities by restricting access to Java applets. This may be accomplished by using proxy server rules, for example. Blocking or whitelisting web requests to .jar and .class files can help to prevent Java from being used by untrusted sources. Filtering requests that contain a Java User-Agent header may also be effective. For example, this technique can be used in environments where Java is required on the local intranet. The proxy can be configured to allow Java requests locally, but block them when the destination is a site on the internet.

Vendor Information (Learn More)

Vendor	Status	Date Notified	Date Updated
Oracle Corporation	Affected	-	05 Mar 2013

If you are a vendor and your product is affected, let us know.

CVSS Metrics (Learn More)

Group	Score	Vector
Base	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
Temporal	8.7	E:H/RL:OF/RC:C
Environmental	9.4	CDP:H/TD:H/CR:ND/IR:ND/AR:ND

References

http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html
http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html#more
https://blogs.oracle.com/security/entry/security_alert_cve_2013_1493
http://www.oracle.com/technetwork/java/javase/7u-relnotes-515228.html
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html

Credit

Oracle credits the following people or organizations for reporting security vulnerabilities addressed by this Security Alert to Oracle: an Anonymous Reporter of TippingPoint's Zero Day Initiative; axtaxt viaTipping Point's Zero Day Initiative; Darien Kindlund of FireEye; Vitaliy Toropov via iDefense; and Vitaliy Toropov via TippingPoint.

This document was written by Michael Orlando.

Other Information

CVE IDs:CVE-2013-1493CVE-2013-0809
Date Public:04 Mar 2013
Date First Published:05 Mar 2013
Date Last Updated:05 Mar 2013
Document Revision:16

Feedback

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Original Source

Url : http://www.kb.cert.org/vuls/id/688246

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:17923

Oval ID:	oval:org.mitre.oval:def:17923
Title:	USN-1755-1 -- openjdk-6 vulnerabilities
Description:	OpenJDK could be made to crash or run programs as your login if it opened a specially crafted file.
Family:	unix	Class:	patch
Reference(s):	USN-1755-1 CVE-2013-0809 CVE-2013-1493	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	openjdk-6
Definition Synopsis:
Release section Ubuntu 12.04 is installed Packages match section icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.3-0ubuntu1~12.04.1 AND icedtea-6-jre-jamvm DPKG is earlier than 6b27-1.12.3-0ubuntu1~12.04.1 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.3-0ubuntu1~12.04.1 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.3-0ubuntu1~12.04.1 AND openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.3-0ubuntu1~12.04.1 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.3-0ubuntu1~12.04.1 AND Release section Ubuntu 11.10 is installed Packages match section icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.3-0ubuntu1~11.10.1 AND icedtea-6-jre-jamvm DPKG is earlier than 6b27-1.12.3-0ubuntu1~11.10.1 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.3-0ubuntu1~11.10.1 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.3-0ubuntu1~11.10.1 AND openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.3-0ubuntu1~11.10.1 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.3-0ubuntu1~11.10.1 AND Release section Ubuntu 10.04 is installed Packages match section icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.3-0ubuntu1~10.04.1 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.3-0ubuntu1~10.04.1 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.3-0ubuntu1~10.04.1 AND openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.3-0ubuntu1~10.04.1 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.3-0ubuntu1~10.04.1

Definition Id: oval:org.mitre.oval:def:18247

Oval ID:	oval:org.mitre.oval:def:18247
Title:	USN-1755-2 -- openjdk-7 vulnerabilities
Description:	OpenJDK could be made to crash or run programs as your login if it opened a specially crafted file.
Family:	unix	Class:	patch
Reference(s):	USN-1755-2 CVE-2013-0809 CVE-2013-1493	Version:	7
Platform(s):	Ubuntu 12.10	Product(s):	openjdk-7
Definition Synopsis:
Ubuntu 12.10 is installed Packages match section icedtea-7-jre-cacao DPKG is earlier than 7u15-2.3.7-0ubuntu1~12.10.1 AND icedtea-7-jre-jamvm DPKG is earlier than 7u15-2.3.7-0ubuntu1~12.10.1 AND openjdk-7-jre DPKG is earlier than 7u15-2.3.7-0ubuntu1~12.10.1 AND openjdk-7-jre-headless DPKG is earlier than 7u15-2.3.7-0ubuntu1~12.10.1 AND openjdk-7-jre-lib DPKG is earlier than 7u15-2.3.7-0ubuntu1~12.10.1 AND openjdk-7-jre-zero DPKG is earlier than 7u15-2.3.7-0ubuntu1~12.10.1

Definition Id: oval:org.mitre.oval:def:19076

Oval ID:	oval:org.mitre.oval:def:19076
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0809	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02867 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.28.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.28.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.28.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.28.00 AND Jre15.JRE15-COM version is less than 1.5.0.28.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.28.00 OR Criteria meets HP Security Bulletin HPSBUX02867 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.28.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.28.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.28.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.28.00 AND Jre15.JRE15-COM version is less than 1.5.0.28.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.28.00

Definition Id: oval:org.mitre.oval:def:19137

Oval ID:	oval:org.mitre.oval:def:19137
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1493	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02867 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.28.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.28.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.28.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.28.00 AND Jre15.JRE15-COM version is less than 1.5.0.28.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.28.00 OR Criteria meets HP Security Bulletin HPSBUX02867 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.28.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.28.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.28.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.28.00 AND Jre15.JRE15-COM version is less than 1.5.0.28.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.28.00

Definition Id: oval:org.mitre.oval:def:19246

Oval ID:	oval:org.mitre.oval:def:19246
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1493	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.05.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.05.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.05.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.05.00 AND Jre70.JRE70-COM version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.05.00

Definition Id: oval:org.mitre.oval:def:19320

Oval ID:	oval:org.mitre.oval:def:19320
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0809	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.05.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.05.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.05.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.05.00 AND Jre70.JRE70-COM version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.05.00

Definition Id: oval:org.mitre.oval:def:19477

Oval ID:	oval:org.mitre.oval:def:19477
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1493	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02864 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.18.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.18.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.18.00 AND Jre60.JRE60-COM version is less than 1.6.0.18.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.18.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.18.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.18.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.18.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.18.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-COM version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.18.00 OR Criteria meets HP Security Bulletin HPSBUX02864 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.18.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.18.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-COM version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.18.00

Definition Id: oval:org.mitre.oval:def:19479

Oval ID:	oval:org.mitre.oval:def:19479
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0809	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02864 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.18.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.18.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.18.00 AND Jre60.JRE60-COM version is less than 1.6.0.18.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.18.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.18.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.18.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.18.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.18.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-COM version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.18.00 OR Criteria meets HP Security Bulletin HPSBUX02864 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.18.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.18.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-COM version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.18.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.18.00

Definition Id: oval:org.mitre.oval:def:20185

Oval ID:	oval:org.mitre.oval:def:20185
Title:	RHSA-2013:0601: java-1.6.0-sun security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0601-02 CVE-2013-0809 CVE-2013-1493	Version:	31
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	java-1.6.0-sun
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.6.0-sun-jdbc is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun-src is earlier than 1:1.6.0.43-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:20333

Oval ID:	oval:org.mitre.oval:def:20333
Title:	RHSA-2013:0605: java-1.6.0-openjdk security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0605-02 CESA-2013:0605 CVE-2013-0809 CVE-2013-1493	Version:	31
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4

Definition Id: oval:org.mitre.oval:def:20744

Oval ID:	oval:org.mitre.oval:def:20744
Title:	RHSA-2013:0602: java-1.7.0-openjdk security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0602-01 CESA-2013:0602 CVE-2013-0809 CVE-2013-1493	Version:	31
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section java-1.7.0-openjdk-devel is earlier than 1:1.7.0.9-2.3.8.0.el6_4 AND java-1.7.0-openjdk-demo is earlier than 1:1.7.0.9-2.3.8.0.el6_4 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.9-2.3.8.0.el6_4 AND java-1.7.0-openjdk is earlier than 1:1.7.0.9-2.3.8.0.el6_4 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.9-2.3.8.0.el6_4

Definition Id: oval:org.mitre.oval:def:20775

Oval ID:	oval:org.mitre.oval:def:20775
Title:	RHSA-2013:0604: java-1.6.0-openjdk security update (Important)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0604-00 CESA-2013:0604 CVE-2013-0809 CVE-2013-1493	Version:	31
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9

Definition Id: oval:org.mitre.oval:def:20870

Oval ID:	oval:org.mitre.oval:def:20870
Title:	RHSA-2013:0600: java-1.7.0-oracle security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0600-02 CVE-2013-0809 CVE-2013-1493	Version:	31
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	java-1.7.0-oracle
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.7.0-oracle is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-src is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-javafx is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-plugin is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-devel is earlier than 1:1.7.0.17-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:21040

Oval ID:	oval:org.mitre.oval:def:21040
Title:	RHSA-2013:0626: java-1.7.0-ibm security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0626-02 CVE-2012-1541 CVE-2012-3174 CVE-2012-3213 CVE-2012-3342 CVE-2012-5085 CVE-2013-0351 CVE-2013-0409 CVE-2013-0419 CVE-2013-0422 CVE-2013-0423 CVE-2013-0424 CVE-2013-0425 CVE-2013-0426 CVE-2013-0427 CVE-2013-0428 CVE-2013-0431 CVE-2013-0432 CVE-2013-0433 CVE-2013-0434 CVE-2013-0435 CVE-2013-0437 CVE-2013-0438 CVE-2013-0440 CVE-2013-0441 CVE-2013-0442 CVE-2013-0443 CVE-2013-0444 CVE-2013-0445 CVE-2013-0446 CVE-2013-0449 CVE-2013-0450 CVE-2013-0809 CVE-2013-1473 CVE-2013-1476 CVE-2013-1478 CVE-2013-1480 CVE-2013-1484 CVE-2013-1485 CVE-2013-1486 CVE-2013-1487 CVE-2013-1493	Version:	579
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	java-1.7.0-ibm
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section java-1.7.0-ibm is earlier than 1:1.7.0.4.0-1jpp.2.el5_9 AND java-1.7.0-ibm-demo is earlier than 1:1.7.0.4.0-1jpp.2.el5_9 AND java-1.7.0-ibm-devel is earlier than 1:1.7.0.4.0-1jpp.2.el5_9 AND java-1.7.0-ibm-jdbc is earlier than 1:1.7.0.4.0-1jpp.2.el5_9 AND java-1.7.0-ibm-plugin is earlier than 1:1.7.0.4.0-1jpp.2.el5_9 AND java-1.7.0-ibm-src is earlier than 1:1.7.0.4.0-1jpp.2.el5_9 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section java-1.7.0-ibm is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-demo is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-devel is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-jdbc is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-plugin is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-src is earlier than 1:1.7.0.4.0-1jpp.2.el6_4

Definition Id: oval:org.mitre.oval:def:21077

Oval ID:	oval:org.mitre.oval:def:21077
Title:	RHSA-2013:0625: java-1.6.0-ibm security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0625-02 CVE-2012-1541 CVE-2012-3213 CVE-2012-3342 CVE-2012-5085 CVE-2013-0351 CVE-2013-0409 CVE-2013-0419 CVE-2013-0423 CVE-2013-0424 CVE-2013-0425 CVE-2013-0426 CVE-2013-0427 CVE-2013-0428 CVE-2013-0432 CVE-2013-0433 CVE-2013-0434 CVE-2013-0435 CVE-2013-0438 CVE-2013-0440 CVE-2013-0441 CVE-2013-0442 CVE-2013-0443 CVE-2013-0445 CVE-2013-0446 CVE-2013-0450 CVE-2013-0809 CVE-2013-1473 CVE-2013-1476 CVE-2013-1478 CVE-2013-1480 CVE-2013-1481 CVE-2013-1486 CVE-2013-1487 CVE-2013-1493	Version:	467
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section java-1.6.0-ibm is earlier than 1:1.6.0.13.0-1jpp.2.el5_9 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.13.0-1jpp.2.el5_9 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.13.0-1jpp.2.el5_9 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.13.0-1jpp.2.el5_9 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.13.0-1jpp.2.el5_9 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.13.0-1jpp.2.el5_9 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.13.0-1jpp.2.el5_9 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.13.0-1jpp.2.el5_9 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section java-1.6.0-ibm is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.13.0-1jpp.3.el6_4

Definition Id: oval:org.mitre.oval:def:21109

Oval ID:	oval:org.mitre.oval:def:21109
Title:	RHSA-2013:0624: java-1.5.0-ibm security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0624-02 CVE-2012-5085 CVE-2013-0409 CVE-2013-0424 CVE-2013-0425 CVE-2013-0426 CVE-2013-0427 CVE-2013-0428 CVE-2013-0432 CVE-2013-0433 CVE-2013-0434 CVE-2013-0440 CVE-2013-0442 CVE-2013-0443 CVE-2013-0445 CVE-2013-0450 CVE-2013-0809 CVE-2013-1476 CVE-2013-1478 CVE-2013-1480 CVE-2013-1481 CVE-2013-1486 CVE-2013-1493	Version:	313
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section java-1.5.0-ibm is earlier than 1:1.5.0.16.0-1jpp.1.el5_9 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.16.0-1jpp.1.el5_9 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.0-1jpp.1.el5_9 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.0-1jpp.1.el5_9 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.0-1jpp.1.el5_9 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.0-1jpp.1.el5_9 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.0-1jpp.1.el5_9 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.0-1jpp.1.el5_9 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section java-1.5.0-ibm is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.0-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:21156

Oval ID:	oval:org.mitre.oval:def:21156
Title:	RHSA-2013:0603: java-1.7.0-openjdk security update (Important)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0603-00 CESA-2013:0603 CVE-2013-0809 CVE-2013-1493	Version:	31
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section java-1.7.0-openjdk-src is earlier than 1:1.7.0.9-2.3.8.0.el5_9 AND java-1.7.0-openjdk-demo is earlier than 1:1.7.0.9-2.3.8.0.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.9-2.3.8.0.el5_9 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.9-2.3.8.0.el5_9 AND java-1.7.0-openjdk is earlier than 1:1.7.0.9-2.3.8.0.el5_9

Definition Id: oval:org.mitre.oval:def:23009

Oval ID:	oval:org.mitre.oval:def:23009
Title:	ELSA-2013:0603: java-1.7.0-openjdk security update (Important)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0603-00 CVE-2013-0809 CVE-2013-1493	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.7.0-openjdk-src is earlier than 1:1.7.0.9-2.3.8.0.el5_9 AND java-1.7.0-openjdk-demo is earlier than 1:1.7.0.9-2.3.8.0.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.9-2.3.8.0.el5_9 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.9-2.3.8.0.el5_9 AND java-1.7.0-openjdk is earlier than 1:1.7.0.9-2.3.8.0.el5_9

Definition Id: oval:org.mitre.oval:def:23179

Oval ID:	oval:org.mitre.oval:def:23179
Title:	ELSA-2013:0602: java-1.7.0-openjdk security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0602-01 CVE-2013-0809 CVE-2013-1493	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.7.0-openjdk-devel is earlier than 1:1.7.0.9-2.3.8.0.el6_4 AND java-1.7.0-openjdk-demo is earlier than 1:1.7.0.9-2.3.8.0.el6_4 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.9-2.3.8.0.el6_4 AND java-1.7.0-openjdk is earlier than 1:1.7.0.9-2.3.8.0.el6_4 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.9-2.3.8.0.el6_4

Definition Id: oval:org.mitre.oval:def:23436

Oval ID:	oval:org.mitre.oval:def:23436
Title:	ELSA-2013:0604: java-1.6.0-openjdk security update (Important)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0604-00 CVE-2013-0809 CVE-2013-1493	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.36.1.11.9.el5_9

Definition Id: oval:org.mitre.oval:def:23552

Oval ID:	oval:org.mitre.oval:def:23552
Title:	ELSA-2013:0626: java-1.7.0-ibm security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0626-02 CVE-2012-1541 CVE-2012-3174 CVE-2012-3213 CVE-2012-3342 CVE-2012-5085 CVE-2013-0351 CVE-2013-0409 CVE-2013-0419 CVE-2013-0422 CVE-2013-0423 CVE-2013-0424 CVE-2013-0425 CVE-2013-0426 CVE-2013-0427 CVE-2013-0428 CVE-2013-0431 CVE-2013-0432 CVE-2013-0433 CVE-2013-0434 CVE-2013-0435 CVE-2013-0437 CVE-2013-0438 CVE-2013-0440 CVE-2013-0441 CVE-2013-0442 CVE-2013-0443 CVE-2013-0444 CVE-2013-0445 CVE-2013-0446 CVE-2013-0449 CVE-2013-0450 CVE-2013-0809 CVE-2013-1473 CVE-2013-1476 CVE-2013-1478 CVE-2013-1480 CVE-2013-1484 CVE-2013-1485 CVE-2013-1486 CVE-2013-1487 CVE-2013-1493	Version:	169
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-ibm
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.7.0-ibm-devel is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-src is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-demo is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-plugin is earlier than 1:1.7.0.4.0-1jpp.2.el6_4 AND java-1.7.0-ibm-jdbc is earlier than 1:1.7.0.4.0-1jpp.2.el6_4

Definition Id: oval:org.mitre.oval:def:23673

Oval ID:	oval:org.mitre.oval:def:23673
Title:	ELSA-2013:0625: java-1.6.0-ibm security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0625-02 CVE-2012-1541 CVE-2012-3213 CVE-2012-3342 CVE-2012-5085 CVE-2013-0351 CVE-2013-0409 CVE-2013-0419 CVE-2013-0423 CVE-2013-0424 CVE-2013-0425 CVE-2013-0426 CVE-2013-0427 CVE-2013-0428 CVE-2013-0432 CVE-2013-0433 CVE-2013-0434 CVE-2013-0435 CVE-2013-0438 CVE-2013-0440 CVE-2013-0441 CVE-2013-0442 CVE-2013-0443 CVE-2013-0445 CVE-2013-0446 CVE-2013-0450 CVE-2013-0809 CVE-2013-1473 CVE-2013-1476 CVE-2013-1478 CVE-2013-1480 CVE-2013-1481 CVE-2013-1486 CVE-2013-1487 CVE-2013-1493	Version:	137
Platform(s):	Oracle Linux 6	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm is earlier than 1:1.6.0.13.0-1jpp.3.el6_4 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.13.0-1jpp.3.el6_4

Definition Id: oval:org.mitre.oval:def:23876

Oval ID:	oval:org.mitre.oval:def:23876
Title:	ELSA-2013:0624: java-1.5.0-ibm security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0624-02 CVE-2012-5085 CVE-2013-0409 CVE-2013-0424 CVE-2013-0425 CVE-2013-0426 CVE-2013-0427 CVE-2013-0428 CVE-2013-0432 CVE-2013-0433 CVE-2013-0434 CVE-2013-0440 CVE-2013-0442 CVE-2013-0443 CVE-2013-0445 CVE-2013-0450 CVE-2013-0809 CVE-2013-1476 CVE-2013-1478 CVE-2013-1480 CVE-2013-1481 CVE-2013-1486 CVE-2013-1493	Version:	93
Platform(s):	Oracle Linux 6	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.0-1jpp.1.el6_4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.0-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:23975

Oval ID:	oval:org.mitre.oval:def:23975
Title:	ELSA-2013:0601: java-1.6.0-sun security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0601-02 CVE-2013-0809 CVE-2013-1493	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	java-1.6.0-sun
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.6.0-sun-jdbc is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.43-1jpp.1.el6_4 AND java-1.6.0-sun-src is earlier than 1:1.6.0.43-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:24070

Oval ID:	oval:org.mitre.oval:def:24070
Title:	ELSA-2013:0605: java-1.6.0-openjdk security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0605-02 CVE-2013-0809 CVE-2013-1493	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.57.1.11.9.el6_4

Definition Id: oval:org.mitre.oval:def:24072

Oval ID:	oval:org.mitre.oval:def:24072
Title:	ELSA-2013:0600: java-1.7.0-oracle security update (Critical)
Description:	The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0600-02 CVE-2013-0809 CVE-2013-1493	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-oracle
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.7.0-oracle is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-src is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-javafx is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-plugin is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.17-1jpp.1.el6_4 AND java-1.7.0-oracle-devel is earlier than 1:1.7.0.17-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:25872

Oval ID:	oval:org.mitre.oval:def:25872
Title:	SUSE-SU-2013:0710-1 -- Security update for IBM Java
Description:	IBM Java 1.4.2 has been updated to SR13 FP16 which fixes bugs and security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0710-1 CVE-2013-0485 CVE-2013-0809 CVE-2013-1493	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 10	Product(s):	IBM Java
Definition Synopsis:
SUSE Linux Enterprise Server 11 release section SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_4_2-ibm RPM is earlier than 0:1.4.2_sr13.16-0.2.1 AND java-1_4_2-ibm-jdbc RPM is earlier than 0:1.4.2_sr13.16-0.2.1 AND java-1_4_2-ibm-plugin RPM is earlier than 0:1.4.2_sr13.16-0.2.1 AND SUSE Linux Enterprise Server 10 release section SUSE Linux Enterprise Server 10 is installed Packages match section java-1_4_2-ibm RPM is earlier than 0:1.4.2_sr13.16-0.5.1 AND java-1_4_2-ibm-devel RPM is earlier than 0:1.4.2_sr13.16-0.5.1 AND java-1_4_2-ibm-jdbc RPM is earlier than 0:1.4.2_sr13.16-0.5.1 AND java-1_4_2-ibm-plugin RPM is earlier than 0:1.4.2_sr13.16-0.5.1

Definition Id: oval:org.mitre.oval:def:25934

Oval ID:	oval:org.mitre.oval:def:25934
Title:	SUSE-SU-2013:0434-1 -- Security update for Java
Description:	This release of Icedtea6-1.12.4 fixes the following two issues that allowed a remote attacker to execute arbitrary code remotely by providing crafted images to the affected code.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0434-1 CVE-2013-0809 CVE-2013-1493	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	Java
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section java-1_6_0-openjdk RPM is earlier than 0:1.6.0.0_b27.1.12.4-0.2.1 AND java-1_6_0-openjdk-demo RPM is earlier than 0:1.6.0.0_b27.1.12.4-0.2.1 AND java-1_6_0-openjdk-devel RPM is earlier than 0:1.6.0.0_b27.1.12.4-0.2.1

Definition Id: oval:org.mitre.oval:def:26692

Oval ID:	oval:org.mitre.oval:def:26692
Title:	DEPRECATED: ELSA-2013-0604 -- java-1.6.0-openjdk security update (important)
Description:	[ 1:1.6.0.0-1.36.1.11.9.0.1.el5_9] - Add oracle-enterprise.patch [1:1.6.0.0-1.36.1.11.9] - Updated to icedtea6 1.11.9 - Resolves: rhbz#917176
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0604 CVE-2013-1493 CVE-2013-0809	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.36.1.11.9.0.1.el5_9 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.36.1.11.9.0.1.el5_9 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.36.1.11.9.0.1.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.36.1.11.9.0.1.el5_9 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.36.1.11.9.0.1.el5_9

Definition Id: oval:org.mitre.oval:def:27569

Oval ID:	oval:org.mitre.oval:def:27569
Title:	DEPRECATED: ELSA-2013-0605 -- java-1.6.0-openjdk security update (critical)
Description:	[1:1.6.0.0-1.57.1.11.9] - Updated to icedtea6 1.11.9 - Resolves: rhbz#917179
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0605 CVE-2013-1493 CVE-2013-0809	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 6.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.57.1.11.9.el6_4 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.57.1.11.9.el6_4

Definition Id: oval:org.mitre.oval:def:27572

Oval ID:	oval:org.mitre.oval:def:27572
Title:	DEPRECATED: ELSA-2013-0603 -- java-1.7.0-openjdk security update (important)
Description:	[1.7.0.9-2.3.8.0.0.1.el5_9] - Add oracle-enterprise.patch - Fix DISTRO_NAME to 'Enterprise Linux' [1.7.0.9-2.3.8.0.el5_9] - Updated to icedtea7-forest-2.3 - Resolves: rhbz#917181
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0603 CVE-2013-0809 CVE-2013-1493	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.7.0-openjdk is earlier than 0:1.7.0.9-2.3.8.0.0.1.el5_9 AND java-1.7.0-openjdk-demo is earlier than 0:1.7.0.9-2.3.8.0.0.1.el5_9 AND java-1.7.0-openjdk-devel is earlier than 0:1.7.0.9-2.3.8.0.0.1.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 0:1.7.0.9-2.3.8.0.0.1.el5_9 AND java-1.7.0-openjdk-src is earlier than 0:1.7.0.9-2.3.8.0.0.1.el5_9

Definition Id: oval:org.mitre.oval:def:27593

Oval ID:	oval:org.mitre.oval:def:27593
Title:	DEPRECATED: ELSA-2013-0602 -- java-1.7.0-openjdk security update (critical)
Description:	[1.7.0.9-2.3.8.0.0.1.el6_4] - Update DISTRO_NAME in specfile [1.7.0.9-2.3.8.0el6] - Revert to rhel 6.3 version of spec file - Revert to icedtea7 2.3.8 forest - Resolves: rhbz#917183 [1.7.0.11-2.4.0.pre5.el6] - Update to latest snapshot of icedtea7 2.4 forest - Resolves: rhbz#917183 [1.7.0.9-2.4.0.pre4.3.el6] - Updated to icedtea 2.4.0.pre4, - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch - Resolves: rhbz#911530 [1.7.0.9-2.4.0.pre3.3.el6] - Updated to icedtea 2.4.0.pre3, updated! - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch - Resolves: rhbz#911530 [1.7.0.9-2.4.0.pre2.3.el6] - Removed testing - mauve was outdated and - jtreg was icedtea relict - Updated to icedtea 2.4.0.pre2, updated? - Added java -Xshare:dump to post (see 513605) fo jitarchs - Resolves: rhbz#911530 [1.7.0.11-2.4.0.2.el6] - Unapplied but kept (for 2.3revert) patch110, java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch - Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch - Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch - Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch - NSS enabled by default - enable_nss set to 1 - rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch - rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch - Resolves: rhbz#831734 [1.7.0.11-2.4.0.1.el6] - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch - Added jxmd and idlj to alternatives - make executed with DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true - Unapplied patch302 and deleted systemtap.patch - buildver increased to 11 - icedtea_version set to 2.4.0 - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch - removed tmp-patches source tarball - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar - Disabled nss - enable_nss set to 0 - Resolves: rhbz#895034
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0602 CVE-2013-0809 CVE-2013-1493	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 6.x Packages match section java-1.7.0-openjdk is earlier than 0:1.7.0.9-2.3.8.0.0.1.el6_4 AND java-1.7.0-openjdk-demo is earlier than 0:1.7.0.9-2.3.8.0.0.1.el6_4 AND java-1.7.0-openjdk-devel is earlier than 0:1.7.0.9-2.3.8.0.0.1.el6_4 AND java-1.7.0-openjdk-javadoc is earlier than 0:1.7.0.9-2.3.8.0.0.1.el6_4 AND java-1.7.0-openjdk-src is earlier than 0:1.7.0.9-2.3.8.0.0.1.el6_4

CPE : Common Platform Enumeration

Type	Description	Count
Application	Oracle Jdk cpe:2.3:a:oracle:jdk:1.7.0:update4:::::: cpe:2.3:a:oracle:jdk:1.7.0:-:::::: cpe:2.3:a:oracle:jdk:1.7.0:update1:::::: cpe:2.3:a:oracle:jdk:1.7.0:update2:::::: cpe:2.3:a:oracle:jdk:1.7.0:update3:::::: cpe:2.3:a:oracle:jdk:1.7.0:update5:::::: cpe:2.3:a:oracle:jdk:1.7.0:update7:::::: cpe:2.3:a:oracle:jdk:1.7.0:update6:::::: cpe:2.3:a:oracle:jdk:1.7.0:update11:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10:::::: cpe:2.3:a:oracle:jdk:1.7.0:update13:::::: cpe:2.3:a:oracle:jdk:1.7.0:update15:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17:::::: cpe:2.3:a:oracle:jdk:1.7.0:update21:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10:~~~windows~~:::::* cpe:2.3:a:oracle:jdk:1.7.0:update11:~~~windows~~:::::* cpe:2.3:a:oracle:jdk:1.7.0:update121:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update11_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update21_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update40:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51:::::: cpe:2.3:a:oracle:jdk:1.7.0:update7_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10::::windows::* cpe:2.3:a:oracle:jdk:1.7.0:update11::::windows::* cpe:2.3:a:oracle:jdk:1.7.0:update241:::::: cpe:2.3:a:oracle:jdk:1.7.0:update251:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72:::::: cpe:2.3:a:oracle:jdk:1.7.0:update71:::::: cpe:2.3:a:oracle:jdk:1.7.0:update75:::::: cpe:2.3:a:oracle:jdk:1.7.0:update101:::::: cpe:2.3:a:oracle:jdk:1.7.0:update111:::::: cpe:2.3:a:oracle:jdk:1.7.0:update141:::::: cpe:2.3:a:oracle:jdk:1.7.0:update151:::::: cpe:2.3:a:oracle:jdk:1.7.0:update131:::::: cpe:2.3:a:oracle:jdk:1.7.0:update201:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191:::::: cpe:2.3:a:oracle:jdk:1.7.0:update161:::::: cpe:2.3:a:oracle:jdk:1.7.0:update171:::::: cpe:2.3:a:oracle:jdk:1.7.0:update181:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221:::::: cpe:2.3:a:oracle:jdk:1.7.0:update231:::::: cpe:2.3:a:oracle:jdk:1.7.0:update271:::::: cpe:2.3:a:oracle:jdk:1.7.0:update321:::::: cpe:2.3:a:oracle:jdk:1.7.0:update331:::::: cpe:2.3:a:oracle:jdk:1.7.0:update301:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291:::::: cpe:2.3:a:oracle:jdk:1.7.0:update261:::::: cpe:2.3:a:oracle:jdk:1.7.0:update99:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76:::::: cpe:2.3:a:oracle:jdk:1.7.0:update343:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update201_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update231_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update241_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update271_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update301_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update311_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update321_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update341:::::: cpe:2.3:a:oracle:jdk:1.7.0:update341_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update343_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update65:::::: cpe:2.3:a:oracle:jdk:1.7.0:update65_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b36:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b37:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b38:::::: cpe:2.3:a:oracle:jdk:1.7.0:update79:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b17:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b13:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update99_b31:::::: cpe:2.3:a:oracle:jdk:1.7:update_131:::::: cpe:2.3:a:oracle:jdk:1.6.0:update19:::::: cpe:2.3:a:oracle:jdk:1.6.0:update131:::::: cpe:2.3:a:oracle:jdk:1.6.0:::::::* cpe:2.3:a:oracle:jdk:1.6.0:-:::::: cpe:2.3:a:oracle:jdk:1.6.0:update201:::::: cpe:2.3:a:oracle:jdk:1.6.0:update191:::::: cpe:2.3:a:oracle:jdk:1.6.0:update181:::::: cpe:2.3:a:oracle:jdk:1.6.0:update171:::::: cpe:2.3:a:oracle:jdk:1.6.0:update161:::::: cpe:2.3:a:oracle:jdk:1.6.0:update151:::::: cpe:2.3:a:oracle:jdk:1.6.0:update141:::::: cpe:2.3:a:oracle:jdk:1.6.0:update121:::::: cpe:2.3:a:oracle:jdk:1.6.0:update115:::::: cpe:2.3:a:oracle:jdk:1.6.0:update113:::::: cpe:2.3:a:oracle:jdk:1.6.0:update111:::::: cpe:2.3:a:oracle:jdk:1.6.0:update105:::::: cpe:2.3:a:oracle:jdk:1.6.0:update101:::::: cpe:2.3:a:oracle:jdk:1.6.0:update95:::::: cpe:2.3:a:oracle:jdk:1.6.0:update91:::::: cpe:2.3:a:oracle:jdk:1.6.0:update85:::::: cpe:2.3:a:oracle:jdk:1.6.0:update81:::::: cpe:2.3:a:oracle:jdk:1.6.0:update75:::::: cpe:2.3:a:oracle:jdk:1.6.0:update71:::::: cpe:2.3:a:oracle:jdk:1.6.0:update65:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update23:::::: cpe:2.3:a:oracle:jdk:1.6.0:update22:::::: cpe:2.3:a:oracle:jdk:1.6.0:update29:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33:::::: cpe:2.3:a:oracle:jdk:1.6.0:update25:::::: cpe:2.3:a:oracle:jdk:1.6.0:update24:::::: cpe:2.3:a:oracle:jdk:1.6.0:update27:::::: cpe:2.3:a:oracle:jdk:1.6.0:update43:::::: cpe:2.3:a:oracle:jdk:1.6.0:update45:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51:::::: cpe:2.3:a:oracle:jdk:1.6.0:update30:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34:::::: cpe:2.3:a:oracle:jdk:1.6.0:update39:::::: cpe:2.3:a:oracle:jdk:1.6.0:update41:::::: cpe:2.3:a:oracle:jdk:1.6.0:update38:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35:::::: cpe:2.3:a:oracle:jdk:1.6.0:update26:::::: cpe:2.3:a:oracle:jdk:1.6.0:update60:::::: cpe:2.3:a:oracle:jdk:1.6.0:update10:::::: cpe:2.3:a:oracle:jdk:1.6.0:update1:::::: cpe:2.3:a:oracle:jdk:1.6.0:update2:::::: cpe:2.3:a:oracle:jdk:1.6.0:update3:::::: cpe:2.3:a:oracle:jdk:1.6.0:update4:::::: cpe:2.3:a:oracle:jdk:1.6.0:update11:::::: cpe:2.3:a:oracle:jdk:1.6.0:update12:::::: cpe:2.3:a:oracle:jdk:1.6.0:update13:::::: cpe:2.3:a:oracle:jdk:1.6.0:update14:::::: cpe:2.3:a:oracle:jdk:1.6.0:update5:::::: cpe:2.3:a:oracle:jdk:1.6.0:update6:::::: cpe:2.3:a:oracle:jdk:1.6.0:update7:::::: cpe:2.3:a:oracle:jdk:1.6.0:update15:::::: cpe:2.3:a:oracle:jdk:1.6.0:update16:::::: cpe:2.3:a:oracle:jdk:1.6.0:update17:::::: cpe:2.3:a:oracle:jdk:1.6.0:update18:::::: cpe:2.3:a:oracle:jdk:1.6.0:update20:::::: cpe:2.3:a:oracle:jdk:1.6.0:update21:::::: cpe:2.3:a:oracle:jdk:1.6.0:update8:::::: cpe:2.3:a:oracle:jdk:1.6.0:update9:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b33:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update38_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update43_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51_b32:::::: cpe:2.3:a:oracle:jdk:1.6:update_141:::::: cpe:2.3:a:oracle:jdk:1.5.0:update_71:::::: cpe:2.3:a:oracle:jdk:1.5.0:update11:::::: cpe:2.3:a:oracle:jdk:1.5.0:-:::::: cpe:2.3:a:oracle:jdk:1.5.0:update1:::::: cpe:2.3:a:oracle:jdk:1.5.0:update10:::::: cpe:2.3:a:oracle:jdk:1.5.0:update12:::::: cpe:2.3:a:oracle:jdk:1.5.0:update13:::::: cpe:2.3:a:oracle:jdk:1.5.0:update14:::::: cpe:2.3:a:oracle:jdk:1.5.0:update15:::::: cpe:2.3:a:oracle:jdk:1.5.0:update16:::::: cpe:2.3:a:oracle:jdk:1.5.0:update17:::::: cpe:2.3:a:oracle:jdk:1.5.0:update18:::::: cpe:2.3:a:oracle:jdk:1.5.0:update19:::::: cpe:2.3:a:oracle:jdk:1.5.0:update2:::::: cpe:2.3:a:oracle:jdk:1.5.0:update3:::::: cpe:2.3:a:oracle:jdk:1.5.0:update4:::::: cpe:2.3:a:oracle:jdk:1.5.0:update5:::::: cpe:2.3:a:oracle:jdk:1.5.0:update6:::::: cpe:2.3:a:oracle:jdk:1.5.0:update7:::::: cpe:2.3:a:oracle:jdk:1.5.0:update8:::::: cpe:2.3:a:oracle:jdk:1.5.0:update9:::::: cpe:2.3:a:oracle:jdk:1.5.0:update75:::::: cpe:2.3:a:oracle:jdk:1.5.0:update65:::::: cpe:2.3:a:oracle:jdk:1.5.0:update61:::::: cpe:2.3:a:oracle:jdk:1.5.0:update55:::::: cpe:2.3:a:oracle:jdk:1.5.0:update38:::::: cpe:2.3:a:oracle:jdk:1.5.0:update36:::::: cpe:2.3:a:oracle:jdk:1.5.0:update40:::::: cpe:2.3:a:oracle:jdk:1.5.0:update41:::::: cpe:2.3:a:oracle:jdk:1.5.0:update45:::::: cpe:2.3:a:oracle:jdk:1.5.0:update51:::::: cpe:2.3:a:oracle:jdk:1.5.0:update39:::::: cpe:2.3:a:oracle:jdk:1.5.0:update20:::::: cpe:2.3:a:oracle:jdk:1.5.0:update21:::::: cpe:2.3:a:oracle:jdk:1.5.0:update22:::::: cpe:2.3:a:oracle:jdk:1.5.0:update23:::::: cpe:2.3:a:oracle:jdk:1.5.0:update24:::::: cpe:2.3:a:oracle:jdk:1.5.0:update25:::::: cpe:2.3:a:oracle:jdk:1.5.0:update26:::::: cpe:2.3:a:oracle:jdk:1.5.0:update27:::::: cpe:2.3:a:oracle:jdk:1.5.0:update28:::::: cpe:2.3:a:oracle:jdk:1.5.0:update29:::::: cpe:2.3:a:oracle:jdk:1.5.0:update30:::::: cpe:2.3:a:oracle:jdk:1.5.0:update31:::::: cpe:2.3:a:oracle:jdk:1.5.0:update32:::::: cpe:2.3:a:oracle:jdk:1.5.0:update33:::::: cpe:2.3:a:oracle:jdk:1.5.0:update34:::::: cpe:2.3:a:oracle:jdk:1.5.0:update35:::::: cpe:2.3:a:oracle:jdk:1.4.2_40:::::::* cpe:2.3:a:oracle:jdk:1.4.2_38:::::::* cpe:2.3:a:oracle:jdk::::::::	269
Application	Oracle Jre cpe:2.3:a:oracle:jre:1.7.0:update1:::::: cpe:2.3:a:oracle:jre:1.7.0:update2:::::: cpe:2.3:a:oracle:jre:1.7.0:-:::::: cpe:2.3:a:oracle:jre:1.7.0:update4:::::: cpe:2.3:a:oracle:jre:1.7.0:update3:::::: cpe:2.3:a:oracle:jre:1.7.0:update5:::::: cpe:2.3:a:oracle:jre:1.7.0:update7:::::: cpe:2.3:a:oracle:jre:1.7.0:update6:::::: cpe:2.3:a:oracle:jre:1.7.0:update11:::::: cpe:2.3:a:oracle:jre:1.7.0:update10:::::: cpe:2.3:a:oracle:jre:1.7.0:update9:::::: cpe:2.3:a:oracle:jre:1.7.0:update13:::::: cpe:2.3:a:oracle:jre:1.7.0:update15:::::: cpe:2.3:a:oracle:jre:1.7.0:update17:::::: cpe:2.3:a:oracle:jre:1.7.0:update21:::::: cpe:2.3:a:oracle:jre:1.7.0:update25:::::: cpe:2.3:a:oracle:jre:1.7.0:update11:~~~windows~~:::::* cpe:2.3:a:oracle:jre:1.7.0:update10:~~~windows~~:::::* cpe:2.3:a:oracle:jre:1.7.0:update_67:::::: cpe:2.3:a:oracle:jre:1.7.0:update_75:::::: cpe:2.3:a:oracle:jre:1.7.0:update_80:::::: cpe:2.3:a:oracle:jre:1.7.0:update_85:::::: cpe:2.3:a:oracle:jre:1.7.0:update121:::::: cpe:2.3:a:oracle:jre:1.7.0:update10_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update11_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update17_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update17_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update21_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update25_b33:::::: cpe:2.3:a:oracle:jre:1.7.0:update25_b34:::::: cpe:2.3:a:oracle:jre:1.7.0:update25_b35:::::: cpe:2.3:a:oracle:jre:1.7.0:update40:::::: cpe:2.3:a:oracle:jre:1.7.0:update45:::::: cpe:2.3:a:oracle:jre:1.7.0:update45_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update45_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update45_b33:::::: cpe:2.3:a:oracle:jre:1.7.0:update45_b34:::::: cpe:2.3:a:oracle:jre:1.7.0:update51:::::: cpe:2.3:a:oracle:jre:1.7.0:update7_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update9_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update9_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update_131:::::: cpe:2.3:a:oracle:jre:1.7.0:update10::::windows::* cpe:2.3:a:oracle:jre:1.7.0:update11::::windows::* cpe:2.3:a:oracle:jre:1.7.0:update_241:::::: cpe:2.3:a:oracle:jre:1.7.0:update301:::::: cpe:2.3:a:oracle:jre:1.7.0:update321:::::: cpe:2.3:a:oracle:jre:1.7.0:update331:::::: cpe:2.3:a:oracle:jre:1.7.0:update251:::::: cpe:2.3:a:oracle:jre:1.7.0:update231:::::: cpe:2.3:a:oracle:jre:1.7.0:update221:::::: cpe:2.3:a:oracle:jre:1.7.0:update211:::::: cpe:2.3:a:oracle:jre:1.7.0:update201:::::: cpe:2.3:a:oracle:jre:1.7.0:update191:::::: cpe:2.3:a:oracle:jre:1.7.0:update181:::::: cpe:2.3:a:oracle:jre:1.7.0:update171:::::: cpe:2.3:a:oracle:jre:1.7.0:update161:::::: cpe:2.3:a:oracle:jre:1.7.0:update151:::::: cpe:2.3:a:oracle:jre:1.7.0:update141:::::: cpe:2.3:a:oracle:jre:1.7.0:update111:::::: cpe:2.3:a:oracle:jre:1.7.0:update101:::::: cpe:2.3:a:oracle:jre:1.7.0:update99:::::: cpe:2.3:a:oracle:jre:1.7.0:update97:::::: cpe:2.3:a:oracle:jre:1.7.0:update95:::::: cpe:2.3:a:oracle:jre:1.7.0:update91:::::: cpe:2.3:a:oracle:jre:1.7.0:update76:::::: cpe:2.3:a:oracle:jre:1.7.0:update72:::::: cpe:2.3:a:oracle:jre:1.7.0:update71:::::: cpe:2.3:a:oracle:jre:1.7.0:update60:::::: cpe:2.3:a:oracle:jre:1.7.0:update343:::::: cpe:2.3:a:oracle:jre:1.7:update_131:::::: cpe:2.3:a:oracle:jre:1.6.0:update19:::::: cpe:2.3:a:oracle:jre:1.6.0:update_10:::::: cpe:2.3:a:oracle:jre:1.6.0:update_81:::::: cpe:2.3:a:oracle:jre:1.6.0:update_95:::::: cpe:2.3:a:oracle:jre:1.6.0:update_101:::::: cpe:2.3:a:oracle:jre:1.6.0:update131:::::: cpe:2.3:a:oracle:jre:1.6.0:update201:::::: cpe:2.3:a:oracle:jre:1.6.0:update191:::::: cpe:2.3:a:oracle:jre:1.6.0:update181:::::: cpe:2.3:a:oracle:jre:1.6.0:update171:::::: cpe:2.3:a:oracle:jre:1.6.0:update161:::::: cpe:2.3:a:oracle:jre:1.6.0:update151:::::: cpe:2.3:a:oracle:jre:1.6.0:update141:::::: cpe:2.3:a:oracle:jre:1.6.0:update121:::::: cpe:2.3:a:oracle:jre:1.6.0:update115:::::: cpe:2.3:a:oracle:jre:1.6.0:update113:::::: cpe:2.3:a:oracle:jre:1.6.0:update111:::::: cpe:2.3:a:oracle:jre:1.6.0:update105:::::: cpe:2.3:a:oracle:jre:1.6.0:update91:::::: cpe:2.3:a:oracle:jre:1.6.0:update85:::::: cpe:2.3:a:oracle:jre:1.6.0:update75:::::: cpe:2.3:a:oracle:jre:1.6.0:update71:::::: cpe:2.3:a:oracle:jre:1.6.0:update65:::::: cpe:2.3:a:oracle:jre:1.6.0:update45:::::: cpe:2.3:a:oracle:jre:1.6.0:update30:::::: cpe:2.3:a:oracle:jre:1.6.0:update33:::::: cpe:2.3:a:oracle:jre:1.6.0:update32:::::: cpe:2.3:a:oracle:jre:1.6.0:update24:::::: cpe:2.3:a:oracle:jre:1.6.0:update35:::::: cpe:2.3:a:oracle:jre:1.6.0:update25:::::: cpe:2.3:a:oracle:jre:1.6.0:update39:::::: cpe:2.3:a:oracle:jre:1.6.0:update51:::::: cpe:2.3:a:oracle:jre:1.6.0:update31:::::: cpe:2.3:a:oracle:jre:1.6.0:update22:::::: cpe:2.3:a:oracle:jre:1.6.0:update38:::::: cpe:2.3:a:oracle:jre:1.6.0:update37:::::: cpe:2.3:a:oracle:jre:1.6.0:update29:::::: cpe:2.3:a:oracle:jre:1.6.0:update27:::::: cpe:2.3:a:oracle:jre:1.6.0:update23:::::: cpe:2.3:a:oracle:jre:1.6.0:update41:::::: cpe:2.3:a:oracle:jre:1.6.0:update43:::::: cpe:2.3:a:oracle:jre:1.6.0:update34:::::: cpe:2.3:a:oracle:jre:1.6.0:update26:::::: cpe:2.3:a:oracle:jre:1.6.0:update60:::::: cpe:2.3:a:oracle:jre:1.6.0:-:::::: cpe:2.3:a:oracle:jre:1.6.0:update1:::::: cpe:2.3:a:oracle:jre:1.6.0:update10:::::: cpe:2.3:a:oracle:jre:1.6.0:update11:::::: cpe:2.3:a:oracle:jre:1.6.0:update12:::::: cpe:2.3:a:oracle:jre:1.6.0:update13:::::: cpe:2.3:a:oracle:jre:1.6.0:update14:::::: cpe:2.3:a:oracle:jre:1.6.0:update15:::::: cpe:2.3:a:oracle:jre:1.6.0:update16:::::: cpe:2.3:a:oracle:jre:1.6.0:update17:::::: cpe:2.3:a:oracle:jre:1.6.0:update18:::::: cpe:2.3:a:oracle:jre:1.6.0:update2:::::: cpe:2.3:a:oracle:jre:1.6.0:update20:::::: cpe:2.3:a:oracle:jre:1.6.0:update21:::::: cpe:2.3:a:oracle:jre:1.6.0:update3:::::: cpe:2.3:a:oracle:jre:1.6.0:update5:::::: cpe:2.3:a:oracle:jre:1.6.0:update4:::::: cpe:2.3:a:oracle:jre:1.6.0:update6:::::: cpe:2.3:a:oracle:jre:1.6.0:update7:::::: cpe:2.3:a:oracle:jre:1.6.0:update8:::::: cpe:2.3:a:oracle:jre:1.6.0:update9:::::: cpe:2.3:a:oracle:jre:1.6:update_141:::::: cpe:2.3:a:oracle:jre:1.5.0:update_71:::::: cpe:2.3:a:oracle:jre:1.5.0:update81:::::: cpe:2.3:a:oracle:jre:1.5.0:update75:::::: cpe:2.3:a:oracle:jre:1.5.0:update65:::::: cpe:2.3:a:oracle:jre:1.5.0:update61:::::: cpe:2.3:a:oracle:jre:1.5.0:update55:::::: cpe:2.3:a:oracle:jre:1.5.0:update38:::::: cpe:2.3:a:oracle:jre:1.5.0:update36:::::: cpe:2.3:a:oracle:jre:1.5.0:update40:::::: cpe:2.3:a:oracle:jre:1.5.0:update41:::::: cpe:2.3:a:oracle:jre:1.5.0:update45:::::: cpe:2.3:a:oracle:jre:1.5.0:update51:::::: cpe:2.3:a:oracle:jre:1.5.0:update39:::::: cpe:2.3:a:oracle:jre:1.5.0:update2:::::: cpe:2.3:a:oracle:jre:1.5.0:update3:::::: cpe:2.3:a:oracle:jre:1.5.0:update4:::::: cpe:2.3:a:oracle:jre:1.5.0:update5:::::: cpe:2.3:a:oracle:jre:1.5.0:update6:::::: cpe:2.3:a:oracle:jre:1.5.0:update7:::::: cpe:2.3:a:oracle:jre:1.5.0:update8:::::: cpe:2.3:a:oracle:jre:1.5.0:update9:::::: cpe:2.3:a:oracle:jre:1.5.0:update10:::::: cpe:2.3:a:oracle:jre:1.5.0:update11:::::: cpe:2.3:a:oracle:jre:1.5.0:update12:::::: cpe:2.3:a:oracle:jre:1.5.0:update13:::::: cpe:2.3:a:oracle:jre:1.5.0:update14:::::: cpe:2.3:a:oracle:jre:1.5.0:update15:::::: cpe:2.3:a:oracle:jre:1.5.0:update16:::::: cpe:2.3:a:oracle:jre:1.5.0:update17:::::: cpe:2.3:a:oracle:jre:1.5.0:update18:::::: cpe:2.3:a:oracle:jre:1.5.0:update19:::::: cpe:2.3:a:oracle:jre:1.5.0:update20:::::: cpe:2.3:a:oracle:jre:1.5.0:update21:::::: cpe:2.3:a:oracle:jre:1.5.0:update22:::::: cpe:2.3:a:oracle:jre:1.5.0:update23:::::: cpe:2.3:a:oracle:jre:1.5.0:update24:::::: cpe:2.3:a:oracle:jre:1.5.0:update25:::::: cpe:2.3:a:oracle:jre:1.5.0:update26:::::: cpe:2.3:a:oracle:jre:1.5.0:update27:::::: cpe:2.3:a:oracle:jre:1.5.0:update28:::::: cpe:2.3:a:oracle:jre:1.5.0:update29:::::: cpe:2.3:a:oracle:jre:1.5.0:update30:::::: cpe:2.3:a:oracle:jre:1.5.0:update31:::::: cpe:2.3:a:oracle:jre:1.5.0:update32:::::: cpe:2.3:a:oracle:jre:1.5.0:update33:::::: cpe:2.3:a:oracle:jre:1.5.0:update34:::::: cpe:2.3:a:oracle:jre:1.5.0:update35:::::: cpe:2.3:a:oracle:jre:1.5.0:-:::::: cpe:2.3:a:oracle:jre:1.5.0:update1:::::: cpe:2.3:a:oracle:jre:1.4.2_40:::::::* cpe:2.3:a:oracle:jre:1.4.2_38:::::::* cpe:2.3:a:oracle:jre::::::::	189
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_18:::::: cpe:2.3:a:sun:jdk:1.6.0:update1:::::: cpe:2.3:a:sun:jdk:1.6.0:update1_b06:::::: cpe:2.3:a:sun:jdk:1.6.0:update2:::::: cpe:2.3:a:sun:jdk:1.6.0:update_14:::::: cpe:2.3:a:sun:jdk:1.6.0:update_10:::::: cpe:2.3:a:sun:jdk:1.6.0:update_7:::::: cpe:2.3:a:sun:jdk:1.6.0:update_17:::::: cpe:2.3:a:sun:jdk:1.6.0:update_13:::::: cpe:2.3:a:sun:jdk:1.6.0:update_6:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:::::: cpe:2.3:a:sun:jdk:1.6.0:update_5:::::: cpe:2.3:a:sun:jdk:1.6.0:update_16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:update_19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_15:::::: cpe:2.3:a:sun:jdk:1.6.0:update_21:::::: cpe:2.3:a:sun:jdk:1.6.0:update_12:::::: cpe:2.3:a:sun:jdk:1.6.0:update_11:::::: cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update25:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update16:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update17:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update19:::::: cpe:2.3:a:sun:jdk:1.5.0:update15:::::: cpe:2.3:a:sun:jdk:1.5.0:update21:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update23:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update18:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update24:::::: cpe:2.3:a:sun:jdk:1.5.0:update22:::::: cpe:2.3:a:sun:jdk:1.5.0:update20:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update11_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update7_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update26:::::: cpe:2.3:a:sun:jdk:1.5.0:update27:::::: cpe:2.3:a:sun:jdk:1.5.0:update29:::::: cpe:2.3:a:sun:jdk:1.5.0:update33:::::: cpe:2.3:a:sun:jdk:1.5.0:update31:::::: cpe:2.3:a:sun:jdk:1.5.0:update28:::::: cpe:2.3:a:sun:jdk:1.5.0:-::::::	55
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_16:::::: cpe:2.3:a:sun:jre:1.6.0:update_14:::::: cpe:2.3:a:sun:jre:1.6.0:update_10:::::: cpe:2.3:a:sun:jre:1.6.0:update_20:::::: cpe:2.3:a:sun:jre:1.6.0:update_18:::::: cpe:2.3:a:sun:jre:1.6.0:update_11:::::: cpe:2.3:a:sun:jre:1.6.0:update_13:::::: cpe:2.3:a:sun:jre:1.6.0:update_6:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_17:::::: cpe:2.3:a:sun:jre:1.6.0:update_7:::::: cpe:2.3:a:sun:jre:1.6.0:update_12:::::: cpe:2.3:a:sun:jre:1.6.0:update_15:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:update_21:::::: cpe:2.3:a:sun:jre:1.6.0:update_5:::::: cpe:2.3:a:sun:jre:1.6.0:update_19:::::: cpe:2.3:a:sun:jre:1.6.0:update_9:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0:update16:::::: cpe:2.3:a:sun:jre:1.5.0:update17:::::: cpe:2.3:a:sun:jre:1.5.0:update15:::::: cpe:2.3:a:sun:jre:1.5.0:update22:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update24:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update18:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update21:::::: cpe:2.3:a:sun:jre:1.5.0:update20:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update25:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update23:::::: cpe:2.3:a:sun:jre:1.5.0:update19:::::: cpe:2.3:a:sun:jre:1.5.0:update27:::::: cpe:2.3:a:sun:jre:1.5.0:update26:::::: cpe:2.3:a:sun:jre:1.5.0:update28:::::: cpe:2.3:a:sun:jre:1.5.0:update31:::::: cpe:2.3:a:sun:jre:1.5.0:update33:::::: cpe:2.3:a:sun:jre:1.5.0:update29:::::: cpe:2.3:a:sun:jre:1.5.0:-::::::	53

SAINT Exploits

Description	Link
Java Runtime Environment Color Management memory overwrite	More info here

ExploitDB Exploits

id	Description
2013-03-29	Java CMM Remote Code Execution

Snort® IPS/IDS

Date	Description
2014-03-06	Oracle Java 2D ImagingLib AffineTransformOp integer overflow attempt RuleID : 29606 - Revision : 4 - Type : FILE-JAVA
2014-03-06	Oracle Java 2D ImagingLib AffineTransformOp integer overflow attempt RuleID : 29605 - Revision : 3 - Type : FILE-JAVA
2014-01-11	Neutrino exploit kit initial outbound request - generic detection RuleID : 28911 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request by Java - generic detection RuleID : 28476 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request - generic detection RuleID : 28475 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound plugin detection response - generic detection RuleID : 28474 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28460 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28459 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit landing page RuleID : 28458 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28457 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28456 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28455 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28304 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28298 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28275 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28274 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28273 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28214 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 28032 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit Oracle Java exploit download attempt RuleID : 28031 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit outbound request format RuleID : 27785 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit Oracle Java exploit download attempt RuleID : 27784 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit possible jar download RuleID : 27706 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit Java exploit requested RuleID : 27705 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit Java exploit requested RuleID : 27704 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit plugin detection RuleID : 27703 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit landing page RuleID : 27702 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Gong Da Jar file download RuleID : 27701 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Private exploit kit outbound traffic RuleID : 27144-community - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Private exploit kit outbound traffic RuleID : 27144 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Private exploit kit landing page RuleID : 27143 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Private exploit kit landing page RuleID : 27142 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Private exploit kit landing page RuleID : 27141 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Private exploit kit numerically named exe file dowload RuleID : 27140 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	DotkaChef/Rmayana/DotCache exploit kit Zeroaccess download attempt RuleID : 27113-community - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	DotkaChef/Rmayana/DotCache exploit kit Zeroaccess download attempt RuleID : 27113 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Blackholev2 exploit kit JNLP request RuleID : 27070 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Blackholev2 exploit kit landing page - specific structure RuleID : 27067 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	DotkaChef/Rmayana/DotCache exploit kit Zeroaccess download attempt RuleID : 26950-community - Revision : 9 - Type : EXPLOIT-KIT
2014-01-10	DotkaChef/Rmayana/DotCache exploit kit Zeroaccess download attempt RuleID : 26950 - Revision : 10 - Type : EXPLOIT-KIT
2014-01-10	DotkaChef/Rmayana/DotCache exploit kit inbound java exploit download RuleID : 26948-community - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	DotkaChef/Rmayana/DotCache exploit kit inbound java exploit download RuleID : 26948 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	iFramer injection - specific structure RuleID : 26617 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Multiple exploit kit successful redirection - jnlp bypass RuleID : 26541 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	iFramer injection - specific structure RuleID : 26540 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit java payload detection RuleID : 26512 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Sakura exploit kit redirection structure RuleID : 26511 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit pdf payload detection RuleID : 26510 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Multiple exploit kit java payload detection RuleID : 26509 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit landing page - specific structure RuleID : 26507 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit jar file redirection RuleID : 26506 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious jar download RuleID : 26256 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit redirection page RuleID : 26254 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit MyApplet class retrieval RuleID : 26229 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit redirection page RuleID : 26228 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Oracle Java 2D ImagingLib ConvolveOp integer overflow attempt RuleID : 26200 - Revision : 8 - Type : FILE-JAVA
2014-01-10	Oracle Java 2D ImagingLib LookupOp integer overflow attempt RuleID : 26199 - Revision : 8 - Type : FILE-JAVA
2014-01-10	Oracle Java 2D ImagingLib AffineTransformOp integer overflow attempt RuleID : 26198 - Revision : 8 - Type : FILE-JAVA
2014-01-10	Oracle Java 2D ImagingLib ConvolveOp integer overflow attempt RuleID : 26197 - Revision : 7 - Type : FILE-JAVA
2014-01-10	Oracle Java 2D ImagingLib LookupOp integer overflow attempt RuleID : 26196 - Revision : 7 - Type : FILE-JAVA
2014-01-10	Oracle Java 2D ImagingLib AffineTransformOp integer overflow attempt RuleID : 26195 - Revision : 7 - Type : FILE-JAVA
2014-01-10	Neutrino exploit kit redirection page RuleID : 26100 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit redirection page RuleID : 26099 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit Java archive transfer RuleID : 26098 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit Java archive transfer RuleID : 26097 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit landing page RuleID : 26096 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Neutrino exploit kit landing page RuleID : 26095 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit Portable Executable download RuleID : 26056 - Revision : 7 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 26055 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 26054 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 26053 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 26052 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious jar file download RuleID : 26051 - Revision : 7 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit SWF file download RuleID : 26050 - Revision : 7 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit EOT file download RuleID : 26049 - Revision : 7 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit PDF exploit RuleID : 26048 - Revision : 8 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit redirection structure RuleID : 26047 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit landing page RuleID : 26046 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Known malicious jar archive download attempt RuleID : 26030 - Revision : 3 - Type : FILE-OTHER
2014-01-10	Java user-agent request to svchost.jpg RuleID : 26025 - Revision : 3 - Type : INDICATOR-COMPROMISE
2014-01-10	Gong Da exploit kit redirection page received RuleID : 26013 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit Portable Executable download RuleID : 25968 - Revision : 7 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 25967 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 25966 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 25965 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 25964 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit SWF file download RuleID : 25963 - Revision : 7 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit EOT file download RuleID : 25962 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit former location - has been removed RuleID : 25960 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 25959 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 25958 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 25957 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious class file download RuleID : 25956 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious jar file download RuleID : 25955 - Revision : 7 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit SWF file download RuleID : 25954 - Revision : 8 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit landing page RuleID : 25953 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit landing page RuleID : 25952 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit EOT file download RuleID : 25951 - Revision : 7 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit PDF exploit RuleID : 25950 - Revision : 8 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit java exploit retrieval RuleID : 25862 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit java exploit retrieval RuleID : 25861 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit landing page RuleID : 25860 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit malicious jar file download RuleID : 25859 - Revision : 8 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit Java exploit download RuleID : 25858 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Cool exploit kit PDF exploit RuleID : 25857 - Revision : 9 - Type : EXPLOIT-KIT
2014-01-10	Whitehole exploit kit landing page RuleID : 25806 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Whitehole exploit kit Java exploit retrieval RuleID : 25805 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Whitehole exploit kit malicious jar download attempt RuleID : 25804 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Sibhost exploit kit outbound JAR download attempt RuleID : 24841 - Revision : 5 - Type : EXPLOIT-KIT

Nessus® Vulnerability Scanner

Date	Description
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1456.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1455.nasl - Type : ACT_GATHER_INFO
2014-06-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-32.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-230.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-198.nasl - Type : ACT_GATHER_INFO
2014-01-27	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201401-30.nasl - Type : ACT_GATHER_INFO
2014-01-08	Name : The remote server is affected by multiple vulnerabilities. File : domino_9_0_1.nasl - Type : ACT_GATHER_INFO
2014-01-08	Name : The remote host has software installed that is affected by multiple vulnerabi... File : lotus_domino_9_0_1.nasl - Type : ACT_GATHER_INFO
2013-11-04	Name : The remote server is affected by multiple vulnerabilities. File : domino_8_5_3fp5.nasl - Type : ACT_GATHER_INFO
2013-11-04	Name : The remote host has software installed that is affected by multiple vulnerabi... File : lotus_notes_8_5_3_fp5.nasl - Type : ACT_GATHER_INFO
2013-11-04	Name : The remote host has software installed that is affected by multiple vulnerabi... File : lotus_domino_8_5_3_fp5.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-168.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-167.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0605.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0604.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0603.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0602.nasl - Type : ACT_GATHER_INFO
2013-04-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-130416.nasl - Type : ACT_GATHER_INFO
2013-04-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-130415.nasl - Type : ACT_GATHER_INFO
2013-04-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-8543.nasl - Type : ACT_GATHER_INFO
2013-04-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-8542.nasl - Type : ACT_GATHER_INFO
2013-04-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-ibm-8544.nasl - Type : ACT_GATHER_INFO
2013-04-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-095.nasl - Type : ACT_GATHER_INFO
2013-04-19	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_7_0-ibm-130415.nasl - Type : ACT_GATHER_INFO
2013-03-14	Name : The remote Fedora host is missing a security update. File : fedora_2013-3468.nasl - Type : ACT_GATHER_INFO
2013-03-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-openjdk-130307.nasl - Type : ACT_GATHER_INFO
2013-03-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0624.nasl - Type : ACT_GATHER_INFO
2013-03-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0626.nasl - Type : ACT_GATHER_INFO
2013-03-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0625.nasl - Type : ACT_GATHER_INFO
2013-03-10	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0602.nasl - Type : ACT_GATHER_INFO
2013-03-10	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0605.nasl - Type : ACT_GATHER_INFO
2013-03-08	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0603.nasl - Type : ACT_GATHER_INFO
2013-03-08	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1755-2.nasl - Type : ACT_GATHER_INFO
2013-03-08	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130306_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-03-08	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130306_java_1_6_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-03-08	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130306_java_1_7_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-03-08	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130306_java_1_7_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0603.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote Fedora host is missing a security update. File : fedora_2013-3467.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0604.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0600.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0601.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0605.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0604.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0602.nasl - Type : ACT_GATHER_INFO
2013-03-06	Name : The remote host contains a runtime environment that can allow code execution. File : oracle_java7_update17.nasl - Type : ACT_GATHER_INFO
2013-03-06	Name : The remote host contains a runtime environment that can allow code execution. File : oracle_java6_update43_unix.nasl - Type : ACT_GATHER_INFO
2013-03-06	Name : The remote host contains a runtime environment that can allow code execution. File : oracle_java6_update43.nasl - Type : ACT_GATHER_INFO
2013-03-06	Name : The remote host contains a runtime environment that can allow code execution. File : oracle_java5_update41_unix.nasl - Type : ACT_GATHER_INFO
2013-03-06	Name : The remote host contains a runtime environment that can allow code execution. File : oracle_java5_update41.nasl - Type : ACT_GATHER_INFO
2013-03-06	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1755-1.nasl - Type : ACT_GATHER_INFO
2013-03-06	Name : The remote host contains a runtime environment that can allow code execution. File : oracle_java7_update17_unix.nasl - Type : ACT_GATHER_INFO
2013-03-05	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_2013-002.nasl - Type : ACT_GATHER_INFO
2013-03-05	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update14.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 12:08:07	Multiple Updates
2013-03-23 13:19:27	Multiple Updates
2013-03-06 17:20:12	Multiple Updates
2013-03-06 13:20:05	Multiple Updates
2013-03-05 17:18:17	First insertion

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	32
CPE ID(s)	566
Saint Exploit(s)	1
ExploitDB Exploit(s)	1
Snort® Rule(s)	109
Nessus® Exploit(s)	54

	Related
10	TA13-064A
10	CVE-2013-1493
10	CVE-2013-0809
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 3 more Alert(s)