CVE-2011-3571
published 2012-01-18CVE-2011-3571: Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect…
PriorityP415low3.6CVSS 2.0
AVNACHAuSCPIPAN
EPSS
1.63%
76.1th percentile
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.
Affected
74 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | virtualization | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
CVSS provenance
nvdv2.03.6LOWAV:N/AC:H/Au:S/C:P/I:P/A:N
vendor_redhat3.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)
vendor_redhat·2012-02-14·CVSS 3.6
CVE-2012-0507 [LOW] OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)
OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was
Red Hat
OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)
vendor_redhat·2012-02-14·CVSS 3.6
CVE-2011-3571 [LOW] OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)
OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.
Package: java-1.6.0-sun (Red Hat Enterprise Linux 4) - Affected
GHSA
GHSA-fjgc-8pc6-5qr3: Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3
ghsa_unreviewed·2022-05-14·CVSS 9.8
CVE-2011-3571 [CRITICAL] GHSA-fjgc-8pc6-5qr3: Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.
GHSA
GHSA-43xj-964v-hcjf: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5
ghsa_unreviewed·2022-05-04·CVSS 3.6
CVE-2012-0507 [LOW] CWE-843 GHSA-43xj-964v-hcjf: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a di
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.htmlhttp://secunia.com/advisories/48073http://secunia.com/advisories/48074http://secunia.com/advisories/50897http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://www.oracle.com/technetwork/topics/security/cpujan2012-366304.htmlhttp://lists.opensuse.org/opensuse-updates/2012-10/msg00041.htmlhttp://secunia.com/advisories/48073http://secunia.com/advisories/48074http://secunia.com/advisories/50897http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
2012-01-18
Published