cve/2013/CVE-2013-5910.md

CVE-2013-5910

Description

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
• http://www.ubuntu.com/usn/USN-2089-1
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777

Github

No PoCs found on GitHub currently.