PT-2012-5738 · Oracle+2 · Java Runtime Environment+4

Publicado 2012-10-16 · Atualizado 2017-09-19 · CVE-2012-5067

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 7 Java Runtime Environment (JRE) versions prior to 7 Update 7

Description The issue affects confidentiality and is related to the Deployment component in the Java Runtime Environment. The estimated number of potentially affected devices worldwide is not specified. There is no information available about real-world incidents where this issue was exploited.

Recommendations For Java SE versions prior to 7 Update 7, update to a version later than 7 Update 7. For Java Runtime Environment (JRE) versions prior to 7 Update 7, update to a version later than 7 Update 7.

Exploit

Correção

Identificadores relacionados

CVE-2012-5067

RHSA-2012:1391

RHSA-2012:1467

RHSA-2012_1391

RHSA-2012_1467

Produtos afetados

Java Platform

Java Runtime Environment

Java Se

Red Hat

Suse

Referências · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_method_handle.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rhino.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_double_quote.rb · Exploit
• 🔥 https://exploit-db.com/exploits/22657 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py · Nota
• http://oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2012-5067 · Nota
• https://oracle.com/security-alerts/javacpuoct2012verbose.html · Nota
• https://access.redhat.com/security/cve/CVE-2012-3159 · Nota
• https://access.redhat.com/errata/RHSA-2012:1391 · Nota
• https://bdu.fstec.ru/vul/2022-04098 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-5083 · Nota
• https://access.redhat.com/security/cve/CVE-2012-4416 · Nota