PT-2012-3463 · Oracle+4 · Java Se+5

Published 2012-06-13 · Updated 2024-06-15 · CVE-2012-1711

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java SE versions 7 update 4 and earlier Java SE versions 6 update 32 and earlier Java SE versions 5 update 35 and earlier Java SE version 1.4.2 37 and earlier

Description The issue affects confidentiality, integrity, and availability, and is related to CORBA.

Recommendations For Java SE versions 7 update 4 and earlier, update to a version later than update 4. For Java SE versions 6 update 32 and earlier, update to a version later than update 32. For Java SE versions 5 update 35 and earlier, update to a version later than update 35. For Java SE version 1.4.2 37 and earlier, update to a version later than 1.4.2 37.

Exploit

Fix

Related Identifiers

CESA-2012_0729

CESA-2012_1009

CVE-2012-1711

DSA-2507-1

HPSBUX02805

OPENSUSE-SU-2012_0828-1

OPENSUSE-SU-2024:10534-1

RHSA-2012:0729

RHSA-2012:0730

RHSA-2012:0734

RHSA-2012:1009

RHSA-2012:1019

RHSA-2012_0729

RHSA-2012_0730

RHSA-2012_0734

RHSA-2012_1009

RHSA-2012_1019

SUSE-SU-2012_0762-1

Affected Products

Centos

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

References · 379

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1726 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1717 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1720 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1716 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-0734.html · Vendor Advisory
• http://oracle.com/technetwork/topics/security/javacpujun2012-1515912.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-0729.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1723 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1721 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2012:095 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1718 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1722 · Security Note
• http://security.gentoo.org/glsa/glsa-201406-32.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1713 · Security Note