Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Advisories
Source ID Title
Debian DLA Debian DLA DLA-219-1 icu security update
Debian DSA Debian DSA DSA-3187-1 icu security update
EUVD EUVD EUVD-2013-2330 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Ubuntu USN Ubuntu USN USN-1806-1 OpenJDK 7 vulnerabilities
Ubuntu USN Ubuntu USN USN-1819-1 OpenJDK 6 vulnerabilities
Ubuntu USN Ubuntu USN USN-2522-1 ICU vulnerabilities
Ubuntu USN Ubuntu USN USN-2522-3 ICU vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
Link Providers
http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/ cve-icon cve-icon
http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/ cve-icon cve-icon
http://bugs.icu-project.org/trac/ticket/10107 cve-icon cve-icon
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 cve-icon cve-icon
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/6784c9903db7 cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html cve-icon cve-icon
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html cve-icon cve-icon
http://marc.info/?l=bugtraq&m=137283787217316&w=2 cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2013-0752.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2013-0757.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2013-0758.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2013-1455.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2013-1456.html cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-201406-32.xml cve-icon cve-icon
http://site.icu-project.org/download/51#TOC-Known-Issues cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2013:145 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2013:161 cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html cve-icon cve-icon
http://www.securityfocus.com/bid/59179 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1806-1 cve-icon cve-icon
http://www.us-cert.gov/ncas/alerts/TA13-107A cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=952709 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2013-2384 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16549 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19341 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19549 cve-icon cve-icon
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124 cve-icon cve-icon
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2013-2384 cve-icon
History

Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.16547}

epss

{'score': 0.0736}


cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2024-08-06T15:36:46.492Z

Reserved: 2013-03-05T00:00:00

Link: CVE-2013-2384

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-04-17T18:55:06.760

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-2384

cve-icon Redhat

Severity : Critical

Publid Date: 2013-04-16T00:00:00Z

Links: CVE-2013-2384 - Bugzilla

cve-icon OpenCVE Enrichment

No data.