CVE-2013-4578
Severity CVSS v4.0:
Pending analysis
Type:
CWE-74
Injection
Publication date:
29/12/2017
Last modified:
20/04/2025
Description
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.
Impact
Base Score 3.x
5.30
Severity 3.x
MEDIUM
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update10_b31:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update11_b32:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update13:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update15:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update17_b31:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update17_b32:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update21:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update21_b31:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update25:*:*:*:*:*:* | ||
| cpe:2.3:a:oracle:jdk:1.7.0:update25_b33:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d5f36e1c927e
- http://www.openwall.com/lists/oss-security/2015/02/08/6
- http://www.openwall.com/lists/oss-security/2015/02/09/9
- https://access.redhat.com/errata/RHSA-2014:0414
- https://bugzilla.redhat.com/show_bug.cgi?id=1031471
- http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d5f36e1c927e
- http://www.openwall.com/lists/oss-security/2015/02/08/6
- http://www.openwall.com/lists/oss-security/2015/02/09/9
- https://access.redhat.com/errata/RHSA-2014:0414
- https://bugzilla.redhat.com/show_bug.cgi?id=1031471



