Multiple Oracle Java Runtime Environment Security Vulnerabilities

Release date: 2013-02-01
Updated on:

Affected Systems:
Oracle Java JDK 7.x
Oracle Java JDK 5.x
Oracle Java JDK 1.7.x
Oracle Java JDK 1.5.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57670
CVE (CAN) ID: CVE-2012-1541, CVE-2012-1543, CVE-2012-3213, CVE-2012-3342, CVE-2012-4301, CVE-2012-4305, CVE-2013-0351, CVE-2013-0409, CVE-2013-0419, CVE-2013-0423, CVE-2013-0424, CVE-2013-0425, CVE-2013-0426, CVE-2013-0427, CVE-2013-0428, CVE-2013-0431, CVE-2013-0432, CVE-2013-0433, CVE-2013-0434, CVE-2013-0435, CVE-2013-0436, CVE-2013-0437, CVE-2013-0438, CVE-2013-0439, CVE-2013-0440, CVE-2013-0441, CVE-2013-0442, CVE-2013-0443, CVE-2013-0445, CVE-2013-0446, CVE-2013-0447, CVE-2013-0448, CVE-2013-0449, CVE-2013-0450, CVE-2013-1473, CVE-2013-1474, CVE-2013-1475, CVE-2013-1476, CVE-2013-1477, CVE-2013-1478, CVE-2013-1479, CVE-2013-1480, CVE-2013-1481, CVE-2013-1482
 
Oracle Java Runtime Environment (JRE) is a solution that provides a reliable Runtime Environment for JAVA applications.
 
Oracle Java Runtime Environment has multiple security vulnerabilities. Attackers can exploit these vulnerabilities to execute arbitrary code in application context, bypass security restrictions, and cause DOS.
 
<* Source: Oracle

Link: http://secunia.com/advisories/52064/
Http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
Http://www.oracle.com/technetwork/topics/security/javacpufeb2013verbose-1841196.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Oracle
------
Oracle has released a Security Bulletin (javacpufeb2013-1841061) and patches for this:
 
Javacpufeb2013-1841061: Oracle Java SE Critical Patch Update Advisory-February 2013
Link: http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html