PT-2012-5738 · Oracle+2 · Java Runtime Environment+4

Published 2012-10-16 · Updated 2017-09-19 · CVE-2012-5067

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 7 Java Runtime Environment (JRE) versions prior to 7 Update 7

Description The issue affects confidentiality and is related to the Deployment component in the Java Runtime Environment. The estimated number of potentially affected devices worldwide is not specified. There is no information available about real-world incidents where this issue was exploited.

Recommendations For Java SE versions prior to 7 Update 7, update to a version later than 7 Update 7. For Java Runtime Environment (JRE) versions prior to 7 Update 7, update to a version later than 7 Update 7.

Exploit

Fix

Related Identifiers

CVE-2012-5067

RHSA-2012:1391

RHSA-2012:1467

RHSA-2012_1391

RHSA-2012_1467

Affected Products

Java Platform

Java Runtime Environment

Java Se

Red Hat

Suse

References · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_method_handle.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rhino.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_double_quote.rb · Exploit
• 🔥 https://exploit-db.com/exploits/22657 · Exploit
• http://oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04098 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-5067 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-1391.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1467.html · Vendor Advisory
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py · Note
• https://access.redhat.com/security/cve/CVE-2012-5067 · Note
• https://oracle.com/security-alerts/javacpuoct2012verbose.html · Note