UBUNTU-CVE-2013-2383

See a problem?
Source
https://ubuntu.com/security/notices/UBUNTU-CVE-2013-2383
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-2383.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2013-2383
Related
Published
2013-04-17T00:00:00Z
Modified
2013-04-17T00:00:00Z
Summary
[none]
Details

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.

References

Affected packages

Ubuntu:14.04:LTS / icu

Package

Name
icu
Purl
pkg:deb/ubuntu/icu@52.1-3?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
52.1-3

Affected versions

4.*

4.8.1.1-12ubuntu2
4.8.1.1-13+nmu1
4.8.1.1-13+nmu1ubuntu1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libicu52": "52.1-3",
            "icu-doc": "52.1-3",
            "libicu-dev": "52.1-3",
            "icu-devtools": "52.1-3",
            "libicu52-dbg": "52.1-3"
        }
    ]
}