PT-2013-1664 · Oracle · Javafx

Publicado 2013-02-02 · Atualizado 2017-09-19 · CVE-2012-4301

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JavaFX versions 2.2.4 and earlier

Description The issue affects confidentiality, integrity, and availability. It is reportedly different from other vulnerabilities listed in the February 2013 CPU. There are claims from a third party that this issue may allow remote attackers to execute arbitrary code via an "invalid type case" in the init method of the D3DShader class in the com.sun.prism.d3d package.

Recommendations For JavaFX versions 2.2.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2012-4301

Produtos afetados

Javafx

Referências · 7

• http://verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1027 · Nota
• http://oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16180 · Nota
• http://marc.info/?l=bugtraq&m=136733161405818&w=2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-4301 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA13-032A.html · Nota
• http://kb.cert.org/vuls/id/858729 · Nota