VULNERABILITY INTELLIGENCE
CVE-2013-1488
CVSS score10 HIGH
EPSS probability87.23%
CISA KEVNot currently listed
Published2013-03-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')