PT-2012-3469 · Suse+3 · Suse Linux Enterprise Java+19

Published 2012-06-13 · Updated 2024-06-15 · CVE-2012-1717

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) versions prior to 7 update 5 Java Runtime Environment (JRE) versions prior to 6 update 33 Java Runtime Environment (JRE) versions prior to 5 update 36 Java Runtime Environment (JRE) versions prior to 1.4.2 38 Oracle JDK (affected versions not specified) Red Hat Enterprise Linux Desktop (affected versions not specified) Red Hat Enterprise Linux EUS (affected versions not specified) Red Hat Enterprise Linux for IBM z Systems (affected versions not specified) Red Hat Enterprise Linux for Power Big Endian (affected versions not specified) Red Hat Enterprise Linux for Scientific Computing (affected versions not specified) Red Hat Enterprise Linux Server (affected versions not specified) Red Hat Enterprise Linux Server AUS (affected versions not specified) Red Hat Enterprise Linux Server from RHUI (affected versions not specified) Red Hat Enterprise Linux Workstation (affected versions not specified) Red Hat IcedTea6 (affected versions not specified) Red Hat Satellite with Embedded Oracle (affected versions not specified) SUSE Linux Enterprise Desktop (affected versions not specified) SUSE Linux Enterprise Java (affected versions not specified) SUSE Linux Enterprise Server (affected versions not specified) SUSE Linux Enterprise Software Development Kit (affected versions not specified)

Description The issue affects confidentiality and is related to printing on Solaris or Linux. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For Java Runtime Environment (JRE) versions prior to 7 update 5, update to version 7 update 5 or later. For Java Runtime Environment (JRE) versions prior to 6 update 33, update to version 6 update 33 or later. For Java Runtime Environment (JRE) versions prior to 5 update 36, update to version 5 update 36 or later. For Java Runtime Environment (JRE) versions prior to 1.4.2 38, update to version 1.4.2 38 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the other affected products.

Exploit

Fix

Related Identifiers

CESA-2012_0729

CESA-2012_1009

CVE-2012-1717

DSA-2507-1

OPENSUSE-SU-2024:10534-1

RHSA-2012:0729

RHSA-2012:0730

RHSA-2012:0734

RHSA-2012:1009

RHSA-2012:1019

RHSA-2012:1238

RHSA-2012:1243

RHSA-2012:1245

RHSA-2012:1289

RHSA-2012:1332

RHSA-2012_0729

RHSA-2012_0730

RHSA-2012_0734

RHSA-2012_1009

RHSA-2012_1019

RHSA-2012_1238

RHSA-2012_1245

RHSA-2012_1289

RHSA-2013:1455

RHSA-2013:1456

Affected Products

Centos

Java Platform

Java Runtime Environment

Oracle Jdk

Red Hat

Red Hat Enterprise Linux Desktop

Red Hat Enterprise Linux

Red Hat Enterprise Linux Server

Red Hat Enterprise Linux Server From Rhui

Red Hat Enterprise Linux Workstation

Red Hat Enterprise Linux For Ibm Z Systems

Red Hat Enterprise Linux For Power Big Endian

Red Hat Enterprise Linux For Scientific Computing

Red Hat Icedtea6

Red Hat Satellite With Embedded Oracle

Suse Linux Enterprise Desktop

Suse Linux Enterprise Java

Suse Linux Enterprise Server

Suse Linux Enterprise Software Development Kit

Suse

References · 381

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1726 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1717 · Security Note
• http://oracle.com/technetwork/topics/security/cpujul2012-392727.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0734.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1716 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html · Vendor Advisory
• http://oracle.com/technetwork/topics/security/javacpujun2012-1515912.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1455.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04417 · Security Note
• https://linux.oracle.com/errata/ELSA-2012-0729.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4681 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html · Vendor Advisory