CVE-2013-1480

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" in awt_parseImage.c, which triggers memory corruption.

• http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS
• http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/50e268c1fb1f
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html
• http://marc.info/?l=bugtraq&m=136439120408139&w=2
• http://marc.info/?l=bugtraq&m=136570436423916&w=2
• http://marc.info/?l=bugtraq&m=136733161405818&w=2
• http://rhn.redhat.com/errata/RHSA-2013-0236.html
• http://rhn.redhat.com/errata/RHSA-2013-0237.html
• http://rhn.redhat.com/errata/RHSA-2013-0245.html
• http://rhn.redhat.com/errata/RHSA-2013-0246.html
• http://rhn.redhat.com/errata/RHSA-2013-0247.html
• http://rhn.redhat.com/errata/RHSA-2013-1455.html
• http://rhn.redhat.com/errata/RHSA-2013-1456.html
• http://security.gentoo.org/glsa/glsa-201406-32.xml
• http://www.kb.cert.org/vuls/id/858729US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:095
• http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.htmlVendor Advisory
• http://www.securityfocus.com/bid/57691
• http://www.us-cert.gov/cas/techalerts/TA13-032A.htmlUS Government Resource
• https://bugzilla.redhat.com/show_bug.cgi?id=906904
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16045
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18845
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19351
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19504
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056
• http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS
• http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/50e268c1fb1f
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html
• http://marc.info/?l=bugtraq&m=136439120408139&w=2
• http://marc.info/?l=bugtraq&m=136570436423916&w=2
• http://marc.info/?l=bugtraq&m=136733161405818&w=2
• http://rhn.redhat.com/errata/RHSA-2013-0236.html
• http://rhn.redhat.com/errata/RHSA-2013-0237.html
• http://rhn.redhat.com/errata/RHSA-2013-0245.html
• http://rhn.redhat.com/errata/RHSA-2013-0246.html
• http://rhn.redhat.com/errata/RHSA-2013-0247.html
• http://rhn.redhat.com/errata/RHSA-2013-1455.html
• http://rhn.redhat.com/errata/RHSA-2013-1456.html
• http://security.gentoo.org/glsa/glsa-201406-32.xml
• http://www.kb.cert.org/vuls/id/858729US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:095
• http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.htmlVendor Advisory
• http://www.securityfocus.com/bid/57691
• http://www.us-cert.gov/cas/techalerts/TA13-032A.htmlUS Government Resource
• https://bugzilla.redhat.com/show_bug.cgi?id=906904
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16045
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18845
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19351
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19504
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056

Published

Feb 2, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1474Unspecified vulnerability in the JavaFX component in Oracle …
• CVE-2013-1475Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1476Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1477Unspecified vulnerability in the JavaFX component in Oracle …
• CVE-2013-1478Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1479Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1481Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1482Unspecified vulnerability in the JavaFX component in Oracle …
• CVE-2013-1483Unspecified vulnerability in the JavaFX component in Oracle …
• CVE-2013-1484Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1485Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1486Unspecified vulnerability in the Java Runtime Environment (J…