Oracle Java Serviceability Subcomponent ProviderSkeleton Class Vulnerability

Added: 07/11/2013
CVE: CVE-2013-2460
BID: 60635
OSVDB: 94346


Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets.


A vulnerability in the Serviceability subcomponent of Java Runtime Environment could allow a remote attacker to execute arbitrary code if a user is tricked into opening a web page with a specially crafted applet. Oracle JRE 7 Update 21 and earlier are vulnerable.


Apply patches as directed in Oracle Java SE Critical Patch Update Advisory - June 2013.



This exploit has been tested against Oracle JRE 7 Update 21 on Windows XP SP3 English (DEP OptIn) and Windows 7 SP1 (DEP OptIn).

The user must open the exploit using Internet Explorer on Windows.



Back to exploit index