CVE-2013-5843 — JDK: unspecified vulnerability fixed in 7u45 (2D)

Back Back to CVE browser

HIGH

JDK: unspecified vulnerability fixed in 7u45 (2D)

Published Oct 16, 2013

10.0

HIGH

CVSS 2.0

EPSS 6.13%

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Affected products

Oracle Java for Red Hat Enterprise Linux 5

java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10

Fixed · RHSA-2014:0414
Oracle Java for Red Hat Enterprise Linux 6

java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5

Fixed · RHSA-2014:0414
Red Hat Network Satellite Server v 5.4

java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5

Fixed · RHSA-2013:1793
Red Hat Network Satellite Server v 5.5

java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5

Fixed · RHSA-2013:1793
Red Hat Satellite 5.6

java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5

Fixed · RHSA-2013:1793
Supplementary for Red Hat Enterprise Linux 5

java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el5_10

Fixed · RHSA-2013:1509
Supplementary for Red Hat Enterprise Linux 5

java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10

Fixed · RHSA-2013:1508
Supplementary for Red Hat Enterprise Linux 5

java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10

Fixed · RHSA-2013:1507
Supplementary for Red Hat Enterprise Linux 5

java-1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10

Fixed · RHSA-2013:1440
Supplementary for Red Hat Enterprise Linux 6

java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4

Fixed · RHSA-2013:1509
Supplementary for Red Hat Enterprise Linux 6

java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4

Fixed · RHSA-2013:1508
Supplementary for Red Hat Enterprise Linux 6

java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4

Fixed · RHSA-2013:1507
Supplementary for Red Hat Enterprise Linux 6

java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4

Fixed · RHSA-2013:1440

Product	Package	State	Advisory
Oracle Java for Red Hat Enterprise Linux 5	java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10	Fixed	RHSA-2014:0414
Oracle Java for Red Hat Enterprise Linux 6	java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5	Fixed	RHSA-2014:0414
Red Hat Network Satellite Server v 5.4	java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5	Fixed	RHSA-2013:1793
Red Hat Network Satellite Server v 5.5	java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5	Fixed	RHSA-2013:1793
Red Hat Satellite 5.6	java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5	Fixed	RHSA-2013:1793
Supplementary for Red Hat Enterprise Linux 5	java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el5_10	Fixed	RHSA-2013:1509
Supplementary for Red Hat Enterprise Linux 5	java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10	Fixed	RHSA-2013:1508
Supplementary for Red Hat Enterprise Linux 5	java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10	Fixed	RHSA-2013:1507
Supplementary for Red Hat Enterprise Linux 5	java-1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10	Fixed	RHSA-2013:1440
Supplementary for Red Hat Enterprise Linux 6	java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4	Fixed	RHSA-2013:1509
Supplementary for Red Hat Enterprise Linux 6	java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4	Fixed	RHSA-2013:1508
Supplementary for Red Hat Enterprise Linux 6	java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4	Fixed	RHSA-2013:1507
Supplementary for Red Hat Enterprise Linux 6	java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4	Fixed	RHSA-2013:1440

Remediation

No remediation recorded yet.

Metrics

6.13% 0.06132

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.06132

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	6.13% (0.06132)	93.23th	v5 (v2026.06.15)
Jun 15, 2026	6.13% (0.06132)	92.51th	v5 (v2026.06.15)
Jul 1, 2025	4.90% (0.04897)	89.18th	v4 (v2025.03.14)
Mar 30, 2025	5.94% (0.05941)	89.69th	v4 (v2025.03.14)
Mar 29, 2025	9.62% (0.09621)	88.04th	v4 (v2025.03.14)
Mar 17, 2025	5.94% (0.05941)	89.94th	v4 (v2025.03.14)
Dec 12, 2024	1.34% (0.01344)	86.69th	v3 (v2023.03.01)
Jun 7, 2024	1.34% (0.01344)	86.13th	v3 (v2023.03.01)
May 29, 2023	1.34% (0.01344)	84.12th	v3 (v2023.03.01)
May 8, 2023	1.31% (0.01305)	83.83th	v3 (v2023.03.01)
Apr 12, 2023	1.09% (0.01094)	82.23th	v3 (v2023.03.01)
Mar 7, 2023	1.15% (0.01150)	82.58th	v3 (v2023.03.01)
Mar 6, 2023	3.78% (0.03779)	85.48th	v2 (v2022.01.01)
Apr 1, 2022	3.78% (0.03779)	84.01th	v2 (v2022.01.01)
Feb 4, 2022	3.78% (0.03779)	67.21th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (21)

http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html
vendor-advisoryx_refsource_APPLEBroken LinkMailing List
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
vendor-advisoryx_refsource_SUSEBroken Link
http://marc.info/?l=bugtraq&m=138674031212883&w=2
vendor-advisoryx_refsource_HPIssue TrackingMailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=138674073720143&w=2
vendor-advisoryx_refsource_HPIssue TrackingMailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1440.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1507.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1508.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1509.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1793.html
vendor-advisoryx_refsource_REDHATBroken Link
http://secunia.com/advisories/56338
third-party-advisoryx_refsource_SECUNIANot Applicable
http://support.apple.com/kb/HT5982
x_refsource_CONFIRMThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21655201
x_refsource_CONFIRMThird Party Advisory
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.html
x_refsource_CONFIRMThird Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/63151
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2014:0414
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2013-5843
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1019701
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2013-5843
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19144
vdb-entrysignaturex_refsource_OVALBroken Link
https://www.cve.org/CVERecord?id=CVE-2013-5843

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html		vendor-advisoryx_refsource_APPLEBroken LinkMailing List
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html		vendor-advisoryx_refsource_SUSEBroken Link
http://marc.info/?l=bugtraq&m=138674031212883&w=2		vendor-advisoryx_refsource_HPIssue TrackingMailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=138674073720143&w=2		vendor-advisoryx_refsource_HPIssue TrackingMailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1440.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1507.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1508.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1509.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1793.html		vendor-advisoryx_refsource_REDHATBroken Link
http://secunia.com/advisories/56338		third-party-advisoryx_refsource_SECUNIANot Applicable
http://support.apple.com/kb/HT5982		x_refsource_CONFIRMThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21655201		x_refsource_CONFIRMThird Party Advisory
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.html		x_refsource_CONFIRMThird Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html		x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/63151		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2014:0414		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2013-5843		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1019701		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2013-5843
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19144		vdb-entrysignaturex_refsource_OVALBroken Link
https://www.cve.org/CVERecord?id=CVE-2013-5843