Oracle JRE 1.4.2_38
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*
part: a version: 1.4.2_38 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Jre (1cb184e3-41fa-5dea-b33c-5f401005728c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-1481 |
vulnerable | 2026-06-08 05:03:54.193394 |
Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
Published: 2013-02-02T00:00:00.000Z
Updated: 2024-08-06T15:04:48.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1480 |
vulnerable | 2026-06-08 05:03:54.187334 |
Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" in awt_parseImage.c, which triggers memory corruption.
Published: 2013-02-02T00:00:00.000Z
Updated: 2024-08-06T15:04:48.673Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1478 |
vulnerable | 2026-06-08 05:03:54.177616 |
Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" that can trigger an integer overflow and memory corruption.
Published: 2013-02-02T00:00:00.000Z
Updated: 2024-08-06T15:04:48.678Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1476 |
vulnerable | 2026-06-08 05:03:54.171276 |
Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-0441 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via "certain value handler constructors."
Published: 2013-02-02T00:00:00.000Z
Updated: 2024-08-06T15:04:48.784Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1475 |
vulnerable | 2026-06-08 05:03:54.164772 |
Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "IIOP type reuse management" in ObjectStreamClass.java.
Published: 2013-02-02T00:00:00.000Z
Updated: 2024-08-06T15:04:48.322Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0443 |
vulnerable | 2026-06-08 05:03:47.921171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0442 |
vulnerable | 2026-06-08 05:03:47.914996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0441 |
vulnerable | 2026-06-08 05:03:47.907414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0440 |
vulnerable | 2026-06-08 05:03:47.901555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0434 |
vulnerable | 2026-06-08 05:03:47.820315 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0432 |
vulnerable | 2026-06-08 05:03:47.809865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0428 |
vulnerable | 2026-06-08 05:03:47.681054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0426 |
vulnerable | 2026-06-08 05:03:47.667911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0425 |
vulnerable | 2026-06-08 05:03:47.660672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0424 |
vulnerable | 2026-06-08 05:03:47.606917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.