Java Exploits

New Java Exploits are raining!  I’m going to use this post to collect some data on them.

CVE-2013-1493 (Java 7 Update 15, Java 6 Update 41)
Date: February 2013
Metasploit module:
Interesting blog posting:

CVE-2013-0431 (Java 7 Update 11)
Date: February 2013
Metasploit module: exploit/multi/browser/java_jre17_jmxbean_2
Interesting blog postings:

CVE-2013-0422 (Java 1.7 Update 10)
Date: January 2013
Metasploit module: exploit/multi/browser/java_jre17_jmxbean
Interesting blog postings:

CVE-2012-4681 (Java 7 Update 6)
Date: August 2012
Metasploit Module: exploit/multi/browser/java_jre17_exec
Interesting blog postings:

CVE-2012-0507 (Java 7 Update 2, Java 6 Update 30)
Date: March 2012
Pastebin: and
Metasploit Module: exploit/multi/browser/java_atomicreferencearray
Interesting blog postings:–java-strikes-again

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>