PT-2012-2615 · Oracle+3 · Javafx+5

Published 2012-02-15 · Updated 2022-05-13 · CVE-2012-0499

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 2 Java SE versions prior to 6 Update 30 Java SE versions prior to 5.0 Update 33 Java SE versions prior to 1.4.2 35 JavaFX versions prior to 2.0.2

Description The issue affects the Java Runtime Environment component, allowing remote attackers to impact confidentiality, integrity, and availability through unknown vectors related to 2D.

Recommendations For Java SE versions prior to 7 Update 2, update to version 7 Update 2 or later. For Java SE versions prior to 6 Update 30, update to version 6 Update 30 or later. For Java SE versions prior to 5.0 Update 33, update to version 5.0 Update 33 or later. For Java SE versions prior to 1.4.2 35, update to version 1.4.2 35 or later. For JavaFX versions prior to 2.0.2, update to version 2.0.2 or later.

Exploit

Fix

Related Identifiers

CVE-2012-0499

HPSBUX02757

HPSBUX02760

HPSBUX02777

HPSBUX02784

RHSA-2012:0139

RHSA-2012:0508

RHSA-2012:0514

RHSA-2012:0702

RHSA-2012:1080

RHSA-2012_0139

RHSA-2012_0508

RHSA-2012_0514

RHSA-2013:1455

Affected Products

Hp-Ux

Java Platform

Java Se

Javafx

Red Hat

Suse

References · 109

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_atomicreferencearray.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_vmargs.rb · Exploit
• 🔥 https://github.com/mpgn/BEAST-PoC · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3548 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3552 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0507 · Security Note
• http://marc.info/?l=bugtraq&m=133847939902305&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0501 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00015.html · Vendor Advisory