PT-2012-3473 · Oracle+3 · Java Se+4

Publicado 2012-06-13 · Atualizado 2022-05-13 · CVE-2012-1721

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions 7 update 4 and earlier Java SE versions 6 update 32 and earlier

Description The issue affects confidentiality, integrity, and availability. It is related to the Deployment component in the Java Runtime Environment. The estimated number of potentially affected devices worldwide is not specified. Details about real-world incidents where this issue was exploited are not provided.

Recommendations For Java SE versions 7 update 4 and earlier, update to a version later than update 4 to resolve the issue. For Java SE versions 6 update 32 and earlier, update to a version later than update 32 to resolve the issue. As a temporary workaround, consider restricting the use of the Deployment component in the Java Runtime Environment until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2012-1721

HPSBUX02805

RHSA-2012:0734

RHSA-2012:1019

RHSA-2012:1238

RHSA-2012:1289

RHSA-2012_0734

RHSA-2012_1019

RHSA-2012_1238

RHSA-2012_1289

RHSA-2013:1455

RHSA-2013:1456

ZDI-12-189

Produtos afetados

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

Referências · 57

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• https://access.redhat.com/security/cve/CVE-2012-1725 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4681 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1726 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-1682 · Nota
• https://access.redhat.com/security/cve/CVE-2012-1719 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1721 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=134496371727681&w=2 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2012-1726 · Nota
• https://zerodayinitiative.com/advisories/ZDI-12-189 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-3136 · Nota
• https://access.redhat.com/errata/RHSA-2012:1289 · Nota
• https://access.redhat.com/security/cve/CVE-2012-4681 · Nota
• https://access.redhat.com/errata/RHSA-2012:1019 · Nota