PT-2012-3474 · Oracle+3 · Java Se 6+5

Publicado 2012-06-13 · Atualizado 2022-05-13 · CVE-2012-1722

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE 7 versions prior to update 5 Oracle Java SE 6 versions prior to update 33

Description The issue affects the confidentiality, integrity, and availability of the system. It is related to the Deployment component in the Java Runtime Environment. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For Oracle Java SE 7 versions prior to update 5, update to version 7 update 5 or later. For Oracle Java SE 6 versions prior to update 33, update to version 6 update 33 or later.

Exploit

Correção

Identificadores relacionados

CVE-2012-1722

HPSBUX02805

RHSA-2012:0734

RHSA-2012:1019

RHSA-2012:1238

RHSA-2012:1289

RHSA-2012_0734

RHSA-2012_1019

RHSA-2012_1238

RHSA-2012_1289

RHSA-2013:1455

RHSA-2013:1456

Produtos afetados

Hp-Ux

Java Platform

Java Se 6

Java Se 7

Red Hat

Suse

Referências · 56

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• https://access.redhat.com/security/cve/CVE-2012-1725 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4681 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1726 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-1682 · Nota
• https://access.redhat.com/security/cve/CVE-2012-1719 · Nota
• http://marc.info/?l=bugtraq&m=134496371727681&w=2 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2012-1726 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1722 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3136 · Nota
• https://access.redhat.com/errata/RHSA-2012:1289 · Nota
• https://access.redhat.com/security/cve/CVE-2012-4681 · Nota
• https://access.redhat.com/errata/RHSA-2012:1019 · Nota
• http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild · Nota