{"id":"CVE-2013-1493","published":"2013-03-04T16:00:00Z","modified":"2024-08-06T15:04:48Z","title":"The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.","provenance":"source","from":"CVE.org"},"summary":{"text":"The color management (CMM) functionality in the 2D component of Oracle Java SE (7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier) contains a flaw that can be triggered by crafted raster parameters, leading to an out-of-bounds read or memory corruption in the JVM. A remote attacker can exploit it by supplying a specially crafted image, potentially executing arbitrary code or causing a denial of service (crash), with no authentication indicated and user interaction implied by the need for the victim to process the image.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:51Z"},"cvss":null,"epss":{"score":0.86151,"percentile":0.99729,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2013-03-04","exploitedFirstSeen":"2013-03-04","ransomware":true,"evidence":[{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1493","date":"2013-03-04"},{"url":"https://www.fireeye.com/blog/threat-research/2013/05/ready-for-summer-the-sunshop-campaign.html","date":"2013-05-20"},{"url":"https://krebsonsecurity.com/2013/07/styx-exploit-pack-domo-arigato-pc-roboto/","date":"2013-07-08"},{"url":"https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2013/hidden_lynx.pdf","date":"2013-09-17"},{"url":"https://cisa.gov/news-events/alerts/2013/03/05/oracle-java-contains-multiple-vulnerabilities","date":"2016-10-19"},{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"},{"url":"https://blog.qualys.com/product-tech/2021/10/05/assess-risk-ransomware-attacks-qualys-research","date":"2021-10-05"}],"evidenceTotal":7,"provenance":"source"},"exploited":true,"otx":{"pulseCount":3,"pulses":[{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"},{"name":"Thor Lite Scanner - Cigabuntu (Parrot Version) vs. The Book of Shadows","url":"https://otx.alienvault.com/pulse/666ac558d08da6cfb3ba135b","created":"2024-06-13"},{"name":"Thor-Lite Linux 64 (06.11.24) - enriched a bit more but not 'pruned'","url":"https://otx.alienvault.com/pulse/6668b85065eec626e4766a38","created":"2024-06-11"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19246","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"https://krebsonsecurity.com/2013/03/new-java-0-day-attack-echoes-bit9-breach/","tags":["x_refsource_MISC"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00012.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://www.exploit-db.com/exploits/24904","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.securityfocus.com/bid/58238","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:095","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1029803","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://marc.info/?l=bugtraq&m=136570436423916&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0604.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA13-064A","tags":["third-party-advisory","x_refsource_CERT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://twitter.com/jduck1337/status/307629902574800897","tags":["x_refsource_MISC"]},{"url":"http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.symantec.com/connect/blogs/latest-java-zero-day-shares-connections-bit9-security-incident","tags":["x_refsource_MISC"]},{"url":"http://marc.info/?l=bugtraq&m=136439120408139&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.ubuntu.com/usn/USN-1755-2","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://www.oracle.com/ocom/groups/public/%40otn/documents/webcontent/1915099.xml","tags":["x_refsource_CONFIRM"]},{"url":"http://www.kb.cert.org/vuls/id/688246","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=917553","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1456.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04117626-1","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html","tags":["x_refsource_MISC"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0088","tags":["x_refsource_CONFIRM"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19477","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0603.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0601.html","tags":["vendor-advisory","x_refsource_REDHAT"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 1)","mappingType":"uncategorized","evidence":[],"confidence":"low","confidenceNote":"CTID attack_to_cve Phase 1 \"Uncategorized\" mapping (not staged by impact)"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 1)","mappingType":"uncategorized","evidence":[],"confidence":"low","confidenceNote":"CTID attack_to_cve Phase 1 \"Uncategorized\" mapping (not staged by impact)"}],"reports":[{"id":"SRC-93c55e10ab45afc37c85","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf","date":null,"mentions":[{"quote":"2423, CVE-2013-1493, and CVE-2012-1723), and Silverlight (CVE-2013-3896","start":100096,"end":100167},{"quote":"CVE-2013-1493, 56","start":261445,"end":261462}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2013-1529","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1529","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":24904,"url":"https://www.exploit-db.com/exploits/24904","title":"Java CMM - Remote Code Execution (Metasploit)","type":"remote","platform":"windows","date":"2013-03-29","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2013-03-29"},"metasploit":[{"name":"Java CMM Remote Code Execution","module":"exploit/windows/browser/java_cmm","type":"exploit","disclosureDate":"2013-03-01","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_cmm.rb"}],"first":{"date":"2013-03-01","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_cmm.rb"},"provenance":"source"},"exploitRefs":["http://www.exploit-db.com/exploits/24904"],"flow":[{"stage":"related","techniques":["T1189","T1203"],"provenance":"source","lowConfidence":true}],"timeline":[{"date":"2013-03-01","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2013-03-29","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_cmm.rb","provenance":"source"},{"date":"2013-03-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2013-1493","provenance":"source"},{"date":"2013-03-04","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.cve.org/CVERecord?id=CVE-2013-1493","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":75.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4987 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.95,"detail":"percentile 0.9973"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}