PT-2012-3475 · Oracle+4 · Java Se+5

Published 2012-06-13 · Updated 2025-03-13 · CVE-2012-1723

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 update 5 Oracle Java SE versions prior to 6 update 33 Oracle Java SE versions prior to 5 update 36 Oracle Java SE versions prior to 1.4.2 38

Description The issue affects confidentiality, integrity, and availability via unknown vectors related to Hotspot in the Java Runtime Environment component.

Recommendations For versions prior to 7 update 5, update to version 7 update 5 or later. For versions prior to 6 update 33, update to version 6 update 33 or later. For versions prior to 5 update 36, update to version 5 update 36 or later. For versions prior to 1.4.2 38, update to version 1.4.2 38 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CESA-2012_0729

CESA-2012_1009

CVE-2012-1723

DSA-2507-1

HPSBUX02805

OPENSUSE-SU-2024:10534-1

RHSA-2012:0729

RHSA-2012:0730

RHSA-2012:0734

RHSA-2012:1009

RHSA-2012:1019

RHSA-2012_0729

RHSA-2012_0730

RHSA-2012_0734

RHSA-2012_1009

RHSA-2012_1019

Affected Products

Centos

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

References · 334

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_method_handle.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_double_quote.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rhino.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_field_access.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb · Exploit
• 🔥 https://exploit-db.com/exploits/19717 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1723 · Security Note
• http://oracle.com/technetwork/topics/security/javacpujun2012-1515912.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=134496371727681&w=2 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201406-32.xml · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0734.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2012:095 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-0729.html · Vendor Advisory