CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0402

Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via unspecified vectors related to JavaFX, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.075

EPSS Ranking 91.3%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2013-0402

Oracle » Javafx » Version: 1.2

cpe:2.3:a:oracle:javafx:1.2
Oracle » Javafx » Version: 1.2.2

cpe:2.3:a:oracle:javafx:1.2.2
Oracle » Javafx » Version: 1.2.3

cpe:2.3:a:oracle:javafx:1.2.3
Oracle » Javafx » Version: 1.3.0

cpe:2.3:a:oracle:javafx:1.3.0
Oracle » Javafx » Version: 1.3.1

cpe:2.3:a:oracle:javafx:1.3.1
Oracle » Javafx » Version: 2.0

cpe:2.3:a:oracle:javafx:2.0
Oracle » Javafx » Version: 2.0.2

cpe:2.3:a:oracle:javafx:2.0.2
Oracle » Javafx » Version: 2.0.3

cpe:2.3:a:oracle:javafx:2.0.3
Oracle » Javafx » Version: 2.1

cpe:2.3:a:oracle:javafx:2.1
Oracle » Javafx » Version: 2.2

cpe:2.3:a:oracle:javafx:2.2
Oracle » Javafx » Version: 2.2.3

cpe:2.3:a:oracle:javafx:2.2.3
Oracle » Javafx » Version: 2.2.4

cpe:2.3:a:oracle:javafx:2.2.4
Oracle » Javafx » Version: 2.2.5

cpe:2.3:a:oracle:javafx:2.2.5
Oracle » Javafx » Version: 2.2.7

cpe:2.3:a:oracle:javafx:2.2.7
Oracle » Jdk » Version: 1.7.0

cpe:2.3:a:oracle:jdk:1.7.0
Oracle » Jre » Version: 1.7.0

cpe:2.3:a:oracle:jre:1.7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0402

Products

Pricing

Contact Us