PT-2012-3475 · Oracle+4 · Java Se+5

Publicado 2012-06-13 · Atualizado 2025-03-13 · CVE-2012-1723

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 update 5 Oracle Java SE versions prior to 6 update 33 Oracle Java SE versions prior to 5 update 36 Oracle Java SE versions prior to 1.4.2 38

Description The issue affects confidentiality, integrity, and availability via unknown vectors related to Hotspot in the Java Runtime Environment component.

Recommendations For versions prior to 7 update 5, update to version 7 update 5 or later. For versions prior to 6 update 33, update to version 6 update 33 or later. For versions prior to 5 update 36, update to version 5 update 36 or later. For versions prior to 1.4.2 38, update to version 1.4.2 38 or later.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CESA-2012_0729

CESA-2012_1009

CVE-2012-1723

DSA-2507-1

HPSBUX02805

OPENSUSE-SU-2024:10534-1

RHSA-2012:0729

RHSA-2012:0730

RHSA-2012:0734

RHSA-2012:1009

RHSA-2012:1019

RHSA-2012_0729

RHSA-2012_0730

RHSA-2012_0734

RHSA-2012_1009

RHSA-2012_1019

Produtos afetados

Centos

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

Referências · 334

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_method_handle.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_double_quote.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rhino.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb · Exploit
• 🔥 https://exploit-db.com/exploits/19717 · Exploit
• https://suse.com/security/cve/CVE-2012-5069 · Nota
• https://suse.com/security/cve/CVE-2013-5783 · Nota
• https://suse.com/security/cve/CVE-2014-0376 · Nota
• https://suse.com/security/cve/CVE-2013-2454 · Nota
• https://suse.com/security/cve/CVE-2014-2412 · Nota
• https://suse.com/security/cve/CVE-2014-6517 · Nota
• https://suse.com/security/cve/CVE-2014-2403 · Nota