PT-2012-3474 · Oracle+3 · Java Se 6+5

Published 2012-06-13 · Updated 2022-05-13 · CVE-2012-1722

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE 7 versions prior to update 5 Oracle Java SE 6 versions prior to update 33

Description The issue affects the confidentiality, integrity, and availability of the system. It is related to the Deployment component in the Java Runtime Environment. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For Oracle Java SE 7 versions prior to update 5, update to version 7 update 5 or later. For Oracle Java SE 6 versions prior to update 33, update to version 6 update 33 or later.

Exploit

Fix

Related Identifiers

CVE-2012-1722

HPSBUX02805

RHSA-2012:0734

RHSA-2012:1019

RHSA-2012:1238

RHSA-2012:1289

RHSA-2012_0734

RHSA-2012_1019

RHSA-2012_1238

RHSA-2012_1289

RHSA-2013:1455

RHSA-2013:1456

Affected Products

Hp-Ux

Java Platform

Java Se 6

Java Se 7

Red Hat

Suse

References · 56

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4681 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1726 · Security Note
• http://marc.info/?l=bugtraq&m=134496371727681&w=2 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1724 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0551 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1723 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0508 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-1722 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1713 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1721 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1725 · Security Note
• http://oracle.com/technetwork/topics/security/javacpujun2012-1515912.html · Vendor Advisory