| Package | Affected versions | Patched versions |
|---|---|---|
| jdk | = 1.7.0 | |
| jre | = 1.7.0 |
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free