{"id":"CVE-2013-2465","published":"2013-06-18T22:55:02Z","modified":"2026-06-16T23:53:30Z","title":"Oracle Java SE Unspecified Vulnerability","vendor":"Oracle","product":"Java SE","tier":"core","eol":null,"description":{"text":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D.","provenance":"source","from":"NVD"},"summary":{"text":"The flaw is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE, affecting the 2D graphics area of Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, as well as OpenJDK 7. A remote attacker with no authentication and no required user interaction could, via unknown vectors, affect confidentiality, integrity, and availability, with a separately reported claim that the flaw permits bypassing the Java sandbox through improper image channel verification in 2D.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T06:57:40Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.98773,"percentile":0.99926,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-03-28","dueDate":"2022-04-18","ransomware":true,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2465","provenance":"source"},"vulncheckKev":{"dateAdded":"2014-03-13","exploitedFirstSeen":"2014-03-13","ransomware":true,"evidence":[{"url":"https://threatpost.com/energy-watering-hole-attack-used-lightsout-exploit-kit/104772/","date":"2014-03-13"},{"url":"https://blog.comodo.com/malware/cisco-popular-sites-spreading-ransomware-via-mavlertising/","date":"2014-06-06"},{"url":"https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2014/Dragonfly_Threat_Against_Western_Energy_Suppliers.pdf","date":"2014-07-07"},{"url":"https://www.recordedfuture.com/russian-apt-toolkits","date":"2016-08-04"},{"url":"https://cisa.gov/news-events/alerts/2015/04/29/top-30-targeted-high-risk-vulnerabilities","date":"2016-09-29"},{"url":"https://www.us-cert.gov/ncas/alerts/TA15-119A","date":"2016-09-29"},{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"},{"url":"https://www.mandiant.com/sites/default/files/2021-09/rpt-java-vulnerabilities.pdf","date":"2021-09-01"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-03-28"},{"url":"https://medium.com/@S3N4T0R/energetic-bear-apt-adversary-simulation-5818ae5ccc38","date":"2024-12-29"}],"evidenceTotal":10,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-693","name":"Protection Mechanism Failure"}],"references":[{"url":"http://advisories.mageia.org/MGASA-2013-0185.html","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880","tags":["Broken Link"]},{"url":"http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=137545505800971&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=137545592101387&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0963.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1059.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1060.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1081.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1456.html","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/54154","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21642336","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:183","tags":["Not Applicable"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/60657","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA13-169A","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0414","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=975118","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703","tags":["Broken Link"]},{"url":"http://advisories.mageia.org/MGASA-2013-0185.html","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880","tags":["Broken Link"]},{"url":"http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=137545505800971&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=137545592101387&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0963.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1059.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1060.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1081.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1456.html","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/54154","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21642336","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:183","tags":["Not Applicable"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/60657","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA13-169A","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0414","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=975118","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703","tags":["Broken Link"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2013-2465-detect-java-vulnerability","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2013-2465-mitigate-java-vulnerability","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2465","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve","ai-mapping"],"basisDetail":"CTID attack_to_cve (Phase 1); claude-haiku-5-5: drive-by via malicious web content in browser","mappingType":"uncategorized","evidence":[{"from":"description","quote":"allows remote attackers to bypass the Java sandbox","start":432,"end":482}],"confidence":"low","confidenceNote":"server-side bug exploitable without user interaction; client-execution technique does not fit"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 1)","mappingType":"uncategorized","evidence":[],"confidence":"low","confidenceNote":"server-side bug exploitable without user interaction; client-execution technique does not fit"},{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["privilege-escalation"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: sandbox escape enables privilege escalation beyond restrictions","mappingType":"primary_impact","evidence":[{"from":"description","quote":"bypass the Java sandbox via vectors related to","start":459,"end":505}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2013-2411","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2411","exploited":true,"exploitedSince":"2022-03-28","provenance":"source"},"exploits":[{"id":27705,"url":"https://www.exploit-db.com/exploits/27705","title":"Java - 'storeImageArray()' Invalid Array Indexing (Metasploit)","type":"remote","platform":"multiple","date":"2013-08-19","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2013-08-19"},"metasploit":[{"name":"Java storeImageArray() Invalid Array Indexing Vulnerability","module":"exploit/multi/browser/java_storeimagearray","type":"exploit","disclosureDate":"2013-08-12","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb"}],"first":{"date":"2013-08-12","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb"},"provenance":"source"},"exploitRefs":["https://www.vicarius.io/vsociety/posts/cve-2013-2465-detect-java-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2013-2465-mitigate-java-vulnerability"],"flow":[{"stage":"primary","techniques":["T1068"],"provenance":"ai"},{"stage":"related","techniques":["T1189","T1203"],"provenance":"source","lowConfidence":true}],"timeline":[{"date":"2013-06-18","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2465","provenance":"source"},{"date":"2013-08-12","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2013-08-19","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb","provenance":"source"},{"date":"2014-03-13","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://threatpost.com/energy-watering-hole-attack-used-lightsout-exploit-kit/104772/","provenance":"source"},{"date":"2022-03-28","kind":"kev","label":"Added to CISA KEV (known ransomware use)","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-03-28","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2411","provenance":"source"}],"speed":{"daysToPublicExploit":55,"firstExploitFrom":"Metasploit","daysToKev":3205},"priority":{"score":79.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4613 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"CISA KEV and VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.99,"detail":"percentile 0.9993"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 NVD references tagged Exploit; 1 Exploit-DB entry; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}