PT-2012-5756 · Oracle+4 · Java Se+5

Published 2012-10-16 · Updated 2024-06-15 · CVE-2012-5085

Positive Technologies (AI Summary)

CVSS v2.0

0.0

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 Update 8 Oracle Java SE versions prior to 6 Update 36 Oracle Java SE versions prior to 5.0 Update 37 Oracle Java SE versions prior to 1.4.2 39

Description The issue affects the Java Runtime Environment component in Oracle Java SE, allowing remote authenticated users to have an unspecified impact via unknown vectors related to Networking.

Recommendations For Oracle Java SE versions prior to 7 Update 8, update to version 7 Update 8 or later. For Oracle Java SE versions prior to 6 Update 36, update to version 6 Update 36 or later. For Oracle Java SE versions prior to 5.0 Update 37, update to version 5.0 Update 37 or later. For Oracle Java SE versions prior to 1.4.2 39, update to version 1.4.2 39 or later.

Exploit

Fix

Related Identifiers

CESA-2012_1384

CESA-2012_1386

CVE-2012-5085

HPSBUX02832

OPENSUSE-SU-2012_1419-1

OPENSUSE-SU-2012_1423-1

OPENSUSE-SU-2012_1424-1

OPENSUSE-SU-2024:10534-1

RHSA-2012:1384

RHSA-2012:1385

RHSA-2012:1386

RHSA-2012:1391

RHSA-2012:1392

RHSA-2012_1384

RHSA-2012_1385

RHSA-2012_1386

RHSA-2012_1391

RHSA-2012_1392

RHSA-2013:0624

RHSA-2013:0625

RHSA-2013:0626

RHSA-2013_0624

RHSA-2013_0625

RHSA-2013_0626

Affected Products

Centos

Hp-Ux

Java Platform

Java Se

Red Hat

Suse

References · 485

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jmxbean.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_method_handle.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_cmm.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_double_quote.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jmxbean_2.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5070 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5068 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1533 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5079 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5075 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-0422 · Security Note