CVE-2012-0498 — Oracle JRE vulnerability

5 documents5 sources

Severity

10.0CRITICALNVD

EPSS

8.0%

top 7.87%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle JRE SUN JRE

Timeline

PublishedFeb 15

Latest updateMay 4

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDoracle/jre1.6.0+3

▶NVDsun/jre1.5.0+2

🔴Vulnerability Details

GHSA

GHSA-vjgx-6cj7-qwh6: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5↗2022-05-04

▶

CVEList

CVE-2012-0498: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5↗2012-02-15

▶

📋Vendor Advisories

Red Hat

JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)↗2012-02-14

▶

💬Community

Bugzilla

CVE-2012-0498 Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)↗2012-02-15

▶