Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Java SE old versions let remote attackers steal or alter data

CVE-2013-5829 · published 13 years ago
Summary

Versions of Oracle Java SE up through 7u40, 6u60, 5.0u51 and the embedded 7u40 release can be tricked by an attacker on the network to read, change or disrupt your applications. The flaw works without needing special permissions and can affect any system running these Java runtimes, including Red Hat desktop and server installations that bundle them. Apply the latest Java updates from Oracle (or your Linux vendor) as soon as possible to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle jdk 1.5.0
1.6.0
1.7.0
cpe:2.3:a:oracle:jdk:1.5.0:-:*:*:*:*:*:*
oracle jre 1.5.0
1.6.0
1.7.0
cpe:2.3:a:oracle:jre:1.5.0:-:*:*:*:*:*:*
redhat enterprise_linux_desktop 5.0
6.0
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
redhat enterprise_linux_eus 6.4
cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*
redhat enterprise_linux_server 5.0
6.0
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
redhat enterprise_linux_server_aus 6.4
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*
redhat enterprise_linux_workstation 5.0
6.0
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
canonical ubuntu_linux 10.04
12.04
12.10
13.04
13.10
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
Original advisory text
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confident...
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
7% chance of attack within 30 days
Timeline
Published16 Oct 2013
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2013-5829 · NVD
Track software like this
Free during beta