Description

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.

Remediation

References

CVE-2013-4578

Related Vulnerabilities

Liferay Portal Excessive Iteration Vulnerability (CVE-2024-25144)

WordPress 4.3.x Prototype Pollution (4.3 - 4.3.27)

Jboss EAP Other Vulnerability (CVE-2020-1710)

MySQL Use of Externally-Controlled Format String Vulnerability (CVE-2008-3963)

Oracle JRE CVE-2022-21360 Vulnerability (CVE-2022-21360)

Severity

Medium

Classification

CVE-2013-4578 CWE-138 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities