Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-m7pa-nh7b-nfd6
Vulnerability ID VCID-m7pa-nh7b-nfd6
Aliases CVE-2013-1493
Summary OpenJDK: CMM malformed raster memory corruption (2D, 8007675)
Status Published
Exploitability 2.0
Weighted Severity 0.8
Risk 1.6
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.91612 https://api.first.org/data/v1/epss?cve=CVE-2013-1493
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1493.json
https://api.first.org/data/v1/epss?cve=CVE-2013-1493
917553 https://bugzilla.redhat.com/show_bug.cgi?id=917553
CVE-2013-1493;OSVDB-90737 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/24904.rb
GLSA-201401-30 https://security.gentoo.org/glsa/201401-30
GLSA-201406-32 https://security.gentoo.org/glsa/201406-32
RHSA-2013:0600 https://access.redhat.com/errata/RHSA-2013:0600
RHSA-2013:0601 https://access.redhat.com/errata/RHSA-2013:0601
RHSA-2013:0602 https://access.redhat.com/errata/RHSA-2013:0602
RHSA-2013:0603 https://access.redhat.com/errata/RHSA-2013:0603
RHSA-2013:0604 https://access.redhat.com/errata/RHSA-2013:0604
RHSA-2013:0605 https://access.redhat.com/errata/RHSA-2013:0605
RHSA-2013:0624 https://access.redhat.com/errata/RHSA-2013:0624
RHSA-2013:0625 https://access.redhat.com/errata/RHSA-2013:0625
RHSA-2013:0626 https://access.redhat.com/errata/RHSA-2013:0626
RHSA-2013:1455 https://access.redhat.com/errata/RHSA-2013:1455
RHSA-2013:1456 https://access.redhat.com/errata/RHSA-2013:1456
USN-1755-1 https://usn.ubuntu.com/1755-1/
USN-1755-2 https://usn.ubuntu.com/1755-2/
Data source Metasploit
Description This module abuses the Color Management classes from a Java Applet to run arbitrary Java code outside of the sandbox as exploited in the wild in February and March of 2013. The vulnerability affects Java version 7u15 and earlier and 6u41 and earlier and has been tested successfully on Windows XP SP3 and Windows 7 SP1 systems. This exploit doesn't bypass click-to-play, so the user must accept the java warning in order to run the malicious applet.
Note 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
Ransomware campaign use Unknown
Source publication date March 1, 2013
Platform Java,Windows
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/browser/java_cmm.rb
Data source Exploit-DB
Date added March 29, 2013
Description Java CMM - Remote Code Execution (Metasploit)
Ransomware campaign use Known
Source publication date March 29, 2013
Exploit type remote
Platform windows
Source update date March 29, 2013
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.99692
EPSS Score 0.91612
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T18:22:22.333225+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1493.json 38.6.0