CVE-2012-0504 — Oracle JDK vulnerability

5 documents5 sources

Severity

9.3CRITICALNVD

EPSS

1.4%

top 19.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle JDK Oracle JRE SUN JDK +1 more

Timeline

PublishedFeb 15

Latest updateMay 4

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install and the Java Update mechanism.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages4 packages

▶NVDoracle/jdk1.7.0+3

▶NVDoracle/jre1.7.0+3

▶NVDsun/jdk1.6.0

▶NVDsun/jre1.6.0

🔴Vulnerability Details

GHSA

GHSA-w2f7-4m38-5cpp: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allow↗2022-05-04

▶

CVEList

CVE-2012-0504: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allow↗2012-02-15

▶

📋Vendor Advisories

Red Hat

JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Install)↗2012-02-14

▶

💬Community

Bugzilla

CVE-2012-0504 Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Install)↗2012-02-15

▶