CVE-2013-4578

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a…

published December 29, 2017

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02500 · 84.6th percentile
Published
2017-12-29T22:00Z
EPSS history
Timeline
  • 29 DEC 22:00Z
    jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a…
    cvelistv5