7.1

CVE-2013-4002

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Java Version5.0.0.0
Ibm ≫ Java Version5.0.11.0
Ibm ≫ Java Version5.0.11.1
Ibm ≫ Java Version5.0.11.2
Ibm ≫ Java Version5.0.12.0
Ibm ≫ Java Version5.0.12.1
Ibm ≫ Java Version5.0.12.2
Ibm ≫ Java Version5.0.12.3
Ibm ≫ Java Version5.0.12.4
Ibm ≫ Java Version5.0.12.5
Ibm ≫ Java Version5.0.13.0
Ibm ≫ Java Version5.0.14.0
Ibm ≫ Java Version5.0.15.0
Ibm ≫ Java Version5.0.16.0
Ibm ≫ Java Version5.0.16.1
Ibm ≫ Java Version5.0.16.2
Ibm ≫ Java Version6.0.0.0
Ibm ≫ Java Version6.0.1.0
Ibm ≫ Java Version6.0.2.0
Ibm ≫ Java Version6.0.3.0
Ibm ≫ Java Version6.0.4.0
Ibm ≫ Java Version6.0.5.0
Ibm ≫ Java Version6.0.6.0
Ibm ≫ Java Version6.0.7.0
Ibm ≫ Java Version6.0.8.0
Ibm ≫ Java Version6.0.8.1
Ibm ≫ Java Version6.0.9.0
Ibm ≫ Java Version6.0.9.1
Ibm ≫ Java Version6.0.9.2
Ibm ≫ Java Version6.0.10.0
Ibm ≫ Java Version6.0.10.1
Ibm ≫ Java Version6.0.11.0
Ibm ≫ Java Version6.0.12.0
Ibm ≫ Java Version6.0.13.0
Ibm ≫ Java Version6.0.13.1
Ibm ≫ Java Version6.0.13.2
Ibm ≫ Java Version7.0.0.0
Ibm ≫ Java Version7.0.1.0
Ibm ≫ Java Version7.0.2.0
Ibm ≫ Java Version7.0.3.0
Ibm ≫ Java Version7.0.4.0
Ibm ≫ Java Version7.0.4.1
Ibm ≫ Java Version7.0.4.2
Oracle ≫ Jdk Version1.5.0 Updateupdate51
Oracle ≫ Jdk Version1.6.0 Updateupdate60
Oracle ≫ Jdk Version1.7.0 Updateupdate40
Oracle ≫ Jre Version1.5.0 Updateupdate51
Oracle ≫ Jre Version1.6.0 Updateupdate60
Oracle ≫ Jre Version1.7.0 Updateupdate40
Oracle ≫ Jrockit Version >= r27.7.0 <= r27.7.6
Oracle ≫ Jrockit Version >= r28.0.0 <= r28.2.8
Ibm ≫ Sterling B2b Integrator Version5.2.4
Ibm ≫ Host On-demand Version11.0
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.1
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.2
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.3
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.4
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.5
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.5.1
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.6
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.6.1
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.7
   Microsoft ≫ Windows Version-
Ibm ≫ Host On-demand Version11.0.8
   Microsoft ≫ Windows Version-
Ibm ≫ Tivoli Application Dependency Discovery Manager Version7.2.2
   Ibm ≫ Aix Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Ibm ≫ Sterling B2b Integrator Version5.1
   Hp ≫ Hp-ux Version-
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Ibm ≫ Sterling B2b Integrator Version5.2
   Hp ≫ Hp-ux Version-
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Ibm ≫ Sterling File Gateway Version2.1
   Hp ≫ Hp-ux Version-
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Ibm ≫ Sterling File Gateway Version2.2
   Hp ≫ Hp-ux Version-
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Opensuse ≫ Opensuse Version12.2
Opensuse ≫ Opensuse Version12.3
Suse ≫ Linux Enterprise Desktop Version10 Updatesp4 SwEdition-
Suse ≫ Linux Enterprise Desktop Version11 Updatesp3
Suse ≫ Linux Enterprise Java Version10 Updatesp4
Suse ≫ Linux Enterprise Java Version11 Updatesp2
Suse ≫ Linux Enterprise Java Version11 Updatesp3
Suse ≫ Linux Enterprise Sdk Version11 Updatesp2
Suse ≫ Linux Enterprise Sdk Version11 Updatesp3
Suse ≫ Linux Enterprise Server Version10 Updatesp3 SwEditionltss
Suse ≫ Linux Enterprise Server Version10 Updatesp4 SwEdition-
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwPlatform-
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwPlatformvmware
Suse ≫ Linux Enterprise Server Version11 Updatesp3 SwPlatform-
Suse ≫ Linux Enterprise Server Version11 Updatesp3 SwPlatformvmware
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version12.10
Canonical ≫ Ubuntu Linux Version13.04
Canonical ≫ Ubuntu Linux Version13.10
Apache ≫ Xerces2 Java Version >= 2.4.0 < 2.12.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.42% 0.788
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:N/I:N/A:C
http://marc.info/?l=bugtraq&m=138674031212883&w=2
Third Party Advisory
Mailing List
Issue Tracking
http://marc.info/?l=bugtraq&m=138674073720143&w=2
Third Party Advisory
Mailing List
Issue Tracking
http://www.securityfocus.com/bid/61310
Third Party Advisory
VDB Entry