CVE-2013-2465

KEV
Published: Giu 18, 2013 Last Modified: Ott 22, 2025
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,8
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 10,0
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to 'Incorrect image channel verification' in 2D.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,9356
Percentile
1,0th
Updated

EPSS Score Trend (Last 90 Days)

693

Protection Mechanism Failure

Draft
Common Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism
Applicable Platforms
Technologies: Not Technology-Specific, ICS/OT
View CWE Details
Exploit

Java - 'storeImageArray()' Invalid Array Indexing (Metasploit)

Verified Metasploit Framework (MSF)

Java - 'storeImageArray()' Invalid Array Indexing (Metasploit)

View Exploit Code →
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update30:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update15:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update31:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Server by Suse

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Java by Suse

cpe:2.3:o:suse:linux_enterprise_java:11:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Software Development Kit by Suse

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Java by Suse

cpe:2.3:o:suse:linux_enterprise_java:10:sp4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Desktop by Suse

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update21:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Software Development Kit by Suse

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update41:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update45:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update34:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Java by Suse

cpe:2.3:o:suse:linux_enterprise_java:11:sp3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Server by Suse

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update43:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update32:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update33:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update29:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.5.0:update45:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.5.0:update40:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.5.0:update39:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update38:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update24:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.5.0:update38:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update37:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.5.0:update36:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update25:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Server by Suse

cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update23:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Server by Suse

cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.5.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update26:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Server by Suse

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Server by Suse

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update22:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.5.0:update41:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update27:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update39:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update13:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Sun

cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jre by Oracle

cpe:2.3:a:oracle:jre:1.6.0:update35:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013…
http://advisories.mageia.org/MGASA-2013-0185.html
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html
http://marc.info/?l=bugtraq&m=137545505800971&w=2
http://marc.info/?l=bugtraq&m=137545592101387&w=2
http://rhn.redhat.com/errata/RHSA-2013-0963.html
http://rhn.redhat.com/errata/RHSA-2013-1059.html
http://rhn.redhat.com/errata/RHSA-2013-1060.html
http://rhn.redhat.com/errata/RHSA-2013-1081.html
http://rhn.redhat.com/errata/RHSA-2013-1455.html
http://rhn.redhat.com/errata/RHSA-2013-1456.html
https://access.redhat.com/errata/RHSA-2014:0414
https://bugzilla.redhat.com/show_bug.cgi?id=975118
http://secunia.com/advisories/54154
http://security.gentoo.org/glsa/glsa-201406-32.xml
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
https://www.vicarius.io/vsociety/posts/cve-2013-2465-detect-java-vulnerability
https://www.vicarius.io/vsociety/posts/cve-2013-2465-mitigate-java-vulnerability
http://www-01.ibm.com/support/docview.wss?uid=swg21642336
http://www.mandriva.com/security/advisories?name=MDVSA-2013:183
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
http://www.securityfocus.com/bid/60657
http://www.us-cert.gov/ncas/alerts/TA13-169A
http://advisories.mageia.org/MGASA-2013-0185.html
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html
http://marc.info/?l=bugtraq&m=137545505800971&w=2
http://marc.info/?l=bugtraq&m=137545592101387&w=2
http://rhn.redhat.com/errata/RHSA-2013-0963.html
http://rhn.redhat.com/errata/RHSA-2013-1059.html
http://rhn.redhat.com/errata/RHSA-2013-1060.html
http://rhn.redhat.com/errata/RHSA-2013-1081.html
http://rhn.redhat.com/errata/RHSA-2013-1455.html
http://rhn.redhat.com/errata/RHSA-2013-1456.html
https://access.redhat.com/errata/RHSA-2014:0414
https://bugzilla.redhat.com/show_bug.cgi?id=975118
http://secunia.com/advisories/54154
http://security.gentoo.org/glsa/glsa-201406-32.xml
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
http://www-01.ibm.com/support/docview.wss?uid=swg21642336
http://www.mandriva.com/security/advisories?name=MDVSA-2013:183
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
http://www.securityfocus.com/bid/60657
http://www.us-cert.gov/ncas/alerts/TA13-169A