CVE ID:	CVE-2013-2463
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Test IDs:	1.3.6.1.4.1.25623.1.0.120022   1.3.6.1.4.1.25623.1.0.120023   1.3.6.1.4.1.25623.1.1.4.2013.1255.1   1.3.6.1.4.1.25623.1.1.4.2013.1255.2   1.3.6.1.4.1.25623.1.1.4.2013.1257.1   1.3.6.1.4.1.25623.1.1.4.2013.1263.1   1.3.6.1.4.1.25623.1.1.4.2013.1256.1   1.3.6.1.4.1.25623.1.1.4.2013.1255.3   1.3.6.1.4.1.25623.1.1.4.2013.1264.1   1.3.6.1.4.1.25623.1.1.4.2013.1305.1   1.3.6.1.4.1.25623.1.1.4.2013.1263.2
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2463 BugTraq ID: 60655 http://www.securityfocus.com/bid/60655 Cert/CC Advisory: TA13-169A http://www.us-cert.gov/ncas/alerts/TA13-169A http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBUX02907 http://marc.info/?l=bugtraq&m=137545505800971&w=2 HPdes Security Advisory: HPSBUX02908 http://marc.info/?l=bugtraq&m=137545592101387&w=2 HPdes Security Advisory: HPSBUX02922 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 HPdes Security Advisory: SSRT101305 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 http://www.mandriva.com/security/advisories?name=MDVSA-2013:183 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b79d56eee18e http://www.informationweek.com/security/vulnerabilities/hackers-target-java-6-with-security-expl/240160443 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17149 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19373 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19620 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19685 RedHat Security Advisories: RHSA-2013:0963 http://rhn.redhat.com/errata/RHSA-2013-0963.html RedHat Security Advisories: RHSA-2013:1059 http://rhn.redhat.com/errata/RHSA-2013-1059.html RedHat Security Advisories: RHSA-2013:1060 http://rhn.redhat.com/errata/RHSA-2013-1060.html RedHat Security Advisories: RHSA-2013:1081 http://rhn.redhat.com/errata/RHSA-2013-1081.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html RedHat Security Advisories: RHSA-2013:1456 http://rhn.redhat.com/errata/RHSA-2013-1456.html RedHat Security Advisories: RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0414 http://secunia.com/advisories/54154 SuSE Security Announcement: SUSE-SU-2013:1255 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html SuSE Security Announcement: SUSE-SU-2013:1256 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html SuSE Security Announcement: SUSE-SU-2013:1257 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html SuSE Security Announcement: SUSE-SU-2013:1263 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html SuSE Security Announcement: SUSE-SU-2013:1264 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html SuSE Security Announcement: SUSE-SU-2013:1293 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html SuSE Security Announcement: SUSE-SU-2013:1305 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html