CVE-2013-4578
29.12.2017, 22:29
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jdk | 𝑥 ≤ 1.7.0 |
| oracle | jre | 𝑥 ≤ 1.7.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| java-1.5.0-ibm |
| ||
| java-1.5.0-ibm-demo |
| ||
| java-1.5.0-ibm-devel |
| ||
| java-1.5.0-ibm-javacomm |
| ||
| java-1.5.0-ibm-jdbc |
| ||
| java-1.5.0-ibm-plugin |
| ||
| java-1.5.0-ibm-src |
| ||
| java-1.6.0-ibm |
| ||
| java-1.6.0-ibm-demo |
| ||
| java-1.6.0-ibm-devel |
| ||
| java-1.6.0-ibm-javacomm |
| ||
| java-1.6.0-ibm-jdbc |
| ||
| java-1.6.0-ibm-plugin |
| ||
| java-1.6.0-ibm-src |
| ||
| java-1.6.0-openjdk |
| ||
| java-1.6.0-openjdk-demo |
| ||
| java-1.6.0-openjdk-devel |
| ||
| java-1.6.0-openjdk-javadoc |
| ||
| java-1.6.0-openjdk-src |
| ||
| java-1.7.0-ibm |
| ||
| java-1.7.0-ibm-demo |
| ||
| java-1.7.0-ibm-devel |
| ||
| java-1.7.0-ibm-jdbc |
| ||
| java-1.7.0-ibm-plugin |
| ||
| java-1.7.0-ibm-src |
| ||
| java-1.7.0-openjdk |
| ||
| java-1.7.0-openjdk-demo |
| ||
| java-1.7.0-openjdk-devel |
| ||
| java-1.7.0-openjdk-javadoc |
| ||
| java-1.7.0-openjdk-src |
| ||
| java-1.7.0-oracle |
| ||
| java-1.7.0-oracle-devel |
| ||
| java-1.7.0-oracle-javafx |
| ||
| java-1.7.0-oracle-jdbc |
| ||
| java-1.7.0-oracle-plugin |
| ||
| java-1.7.0-oracle-src |
|
References