Bug 917550 (CVE-2013-0809) - CVE-2013-0809 OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)
Summary: CVE-2013-0809 OpenJDK: Specially crafted sample model integer overflow (2D, 8...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2013-0809
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
urgent
urgent
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 917174
TreeView+ depends on / blocked
 
Reported: 2013-03-04 10:49 UTC by Stefan Cornelius
Modified: 2021-02-17 07:58 UTC (History)
4 users (show)

Fixed In Version: icedtea6 1.11.9, icedtea6 1.12.4, icedtea7 2.1.7, icedtea7 2.2.7, icedtea7 2.3.8
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-03-12 08:38:34 UTC


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2013:0600 0 normal SHIPPED_LIVE Critical: java-1.7.0-oracle security update 2013-11-15 00:17:00 UTC
Red Hat Product Errata RHSA-2013:0601 0 normal SHIPPED_LIVE Critical: java-1.6.0-sun security update 2013-11-15 00:16:23 UTC
Red Hat Product Errata RHSA-2013:0602 0 normal SHIPPED_LIVE Critical: java-1.7.0-openjdk security update 2013-03-07 00:11:40 UTC
Red Hat Product Errata RHSA-2013:0603 0 normal SHIPPED_LIVE Important: java-1.7.0-openjdk security update 2013-03-07 00:11:03 UTC
Red Hat Product Errata RHSA-2013:0604 0 normal SHIPPED_LIVE Important: java-1.6.0-openjdk security update 2013-03-07 00:10:56 UTC
Red Hat Product Errata RHSA-2013:0605 0 normal SHIPPED_LIVE Critical: java-1.6.0-openjdk security update 2013-03-07 00:47:37 UTC
Red Hat Product Errata RHSA-2013:0624 0 normal SHIPPED_LIVE Critical: java-1.5.0-ibm security update 2013-11-15 00:15:47 UTC
Red Hat Product Errata RHSA-2013:0625 0 normal SHIPPED_LIVE Critical: java-1.6.0-ibm security update 2013-11-15 00:15:10 UTC
Red Hat Product Errata RHSA-2013:0626 0 normal SHIPPED_LIVE Critical: java-1.7.0-ibm security update 2013-11-15 00:14:33 UTC
Red Hat Product Errata RHSA-2013:1455 0 normal SHIPPED_LIVE Low: Red Hat Network Satellite server IBM Java Runtime security update 2013-10-23 20:30:21 UTC
Red Hat Product Errata RHSA-2013:1456 0 normal SHIPPED_LIVE Low: Red Hat Network Satellite server IBM Java Runtime security update 2013-10-23 20:29:56 UTC

Description Stefan Cornelius 2013-03-04 10:49:33 UTC
An integer overflow flaw was found in the way the 2D component handled certain sample model instances.  A specially-crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with the virtual machine privileges.

Comment 1 Vincent Danen 2013-03-04 16:36:54 UTC
Common Vulnerabilities and Exposures assigned an identifier CVE-2013-0809 to
the following vulnerability:

Name: CVE-2013-0809
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0809
Assigned: 20130105
Reference: http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/1915099.xml

Unspecified vulnerability in the 2D component in the Java Runtime
Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier,
6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote
attackers to execute arbitrary code via unknown vectors, a different
vulnerability than CVE-2013-1493.

Comment 2 Tomas Hoger 2013-03-04 20:50:56 UTC
Fixed in Oracle Java SE 7u17 and 6u43.

External Reference:

http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html

Comment 3 errata-xmlrpc 2013-03-06 19:00:06 UTC
This issue has been addressed in following products:

  Supplementary for Red Hat Enterprise Linux 5
  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2013:0601 https://rhn.redhat.com/errata/RHSA-2013-0601.html

Comment 4 errata-xmlrpc 2013-03-06 19:00:56 UTC
This issue has been addressed in following products:

  Supplementary for Red Hat Enterprise Linux 5
  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2013:0600 https://rhn.redhat.com/errata/RHSA-2013-0600.html

Comment 5 errata-xmlrpc 2013-03-06 19:15:27 UTC
This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2013:0604 https://rhn.redhat.com/errata/RHSA-2013-0604.html

Comment 6 errata-xmlrpc 2013-03-06 19:16:06 UTC
This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2013:0603 https://rhn.redhat.com/errata/RHSA-2013-0603.html

Comment 7 errata-xmlrpc 2013-03-06 19:16:17 UTC
This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2013:0602 https://rhn.redhat.com/errata/RHSA-2013-0602.html

Comment 8 Tomas Hoger 2013-03-06 19:26:44 UTC
Oracle security blog post with more information on the security alert:

https://blogs.oracle.com/security/entry/security_alert_cve_2013_1493

Upstream commit, as included in IcedTea7 repositories:

http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/fa09ada25c47

Comment 9 errata-xmlrpc 2013-03-06 19:49:07 UTC
This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2013:0605 https://rhn.redhat.com/errata/RHSA-2013-0605.html

Comment 10 errata-xmlrpc 2013-03-11 18:49:56 UTC
This issue has been addressed in following products:

  Supplementary for Red Hat Enterprise Linux 5
  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2013:0624 https://rhn.redhat.com/errata/RHSA-2013-0624.html

Comment 11 errata-xmlrpc 2013-03-11 19:01:14 UTC
This issue has been addressed in following products:

  Supplementary for Red Hat Enterprise Linux 5
  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2013:0626 https://rhn.redhat.com/errata/RHSA-2013-0626.html

Comment 12 errata-xmlrpc 2013-03-11 19:02:43 UTC
This issue has been addressed in following products:

  Supplementary for Red Hat Enterprise Linux 5
  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2013:0625 https://rhn.redhat.com/errata/RHSA-2013-0625.html

Comment 13 Tomas Hoger 2013-03-12 08:38:34 UTC
Fixed in IcedTea versions IcedTea6 1.11.9 and 1.12.4, and IcedTea7 2.1.7, 2.2.7 and 2.3.8:

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022273.html

Comment 16 Tomas Hoger 2013-07-08 15:13:12 UTC
Write-up of additional details of this flaw:

http://axtaxt.wordpress.com/2013/07/06/analysis-of-cve-2013-0809/

Comment 17 errata-xmlrpc 2013-10-23 16:39:42 UTC
This issue has been addressed in following products:

  Red Hat Network Satellite Server v 5.5

Via RHSA-2013:1456 https://rhn.redhat.com/errata/RHSA-2013-1456.html

Comment 18 errata-xmlrpc 2013-10-23 16:50:58 UTC
This issue has been addressed in following products:

  Red Hat Network Satellite Server v 5.4

Via RHSA-2013:1455 https://rhn.redhat.com/errata/RHSA-2013-1455.html


Note You need to log in before you can comment on or make changes to this bug.