CVE ID:	CVE-2013-2431
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to bypassing the Java sandbox using "method handle intrinsic frames."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2431 Cert/CC Advisory: TA13-107A http://www.us-cert.gov/ncas/alerts/TA13-107A http://security.gentoo.org/glsa/glsa-201406-32.xml http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/c954aab38a7f https://bugzilla.redhat.com/show_bug.cgi?id=952645 http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16410 RedHat Security Advisories: RHSA-2013:0752 http://rhn.redhat.com/errata/RHSA-2013-0752.html RedHat Security Advisories: RHSA-2013:0757 http://rhn.redhat.com/errata/RHSA-2013-0757.html SuSE Security Announcement: SUSE-SU-2013:0814 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html SuSE Security Announcement: openSUSE-SU-2013:0777 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html SuSE Security Announcement: openSUSE-SU-2013:0964 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html http://www.ubuntu.com/usn/USN-1806-1