CVE-2012-1717
published 2012-06-16CVE-2012-1717: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and…
PriorityP48low2.1CVSS 2.0
AVLACLAuNCPINAN
EPSS
0.48%
40.1th percentile
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | jdk | — | — |
| oracle | jdk | — | — |
| oracle | jdk | — | — |
| oracle | jdk | 1.4.2 – 1.4.2_37 | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | 1.4.2 – 1.4.2_37 | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_for_ibm_z_systems | — | — |
| redhat | enterprise_linux_for_power_big_endian | — | — |
| redhat | enterprise_linux_for_scientific_computing | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server_aus | — | — |
| redhat | enterprise_linux_server_from_rhui | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | icedtea6 | < 1.10.8 | 1.10.8 |
| redhat | icedtea6 | >= 1.11.0 < 1.11.3 | 1.11.3 |
| redhat | satellite_with_embedded_oracle | — | — |
| suse | linux_enterprise_desktop | — | — |
| suse | linux_enterprise_java | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
vendor_ubuntu7.5HIGH
vendor_redhat2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
IcedTea-Web regression
vendor_ubuntu·2012-08-30·CVSS 7.5
[HIGH] IcedTea-Web regression
Title: IcedTea-Web regression
Summary: USN 1505-1 introduced a regression in the IcedTea-Web Java web browser
plugin that prevented it from working with the Chromium web browser.
USN-1505-1 fixed vulnerabilities in OpenJDK 6. As part of the update,
IcedTea-Web packages were upgraded to a new version. That upgrade
introduced a regression which prevented the IcedTea-Web plugin from
working with the Chromium web browser in Ubuntu 11.04 and Ubuntu 11.10.
This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that multiple flaws existed in the CORBA (Common
Object Request Broker Architecture) implementation in OpenJDK. An
attacker could create a Java application or applet that used these
flaws to bypass Java sandbox restrictions or m
Ubuntu
OpenJDK 6 vulnerabilities
vendor_ubuntu·2012-07-13·CVSS 7.5
CVE-2012-1711 [HIGH] OpenJDK 6 vulnerabilities
Title: OpenJDK 6 vulnerabilities
Summary: Several security issues were fixed in OpenJDK 6.
It was discovered that multiple flaws existed in the CORBA (Common
Object Request Broker Architecture) implementation in OpenJDK. An
attacker could create a Java application or applet that used these
flaws to bypass Java sandbox restrictions or modify immutable object
data. (CVE-2012-1711, CVE-2012-1719)
It was discovered that multiple flaws existed in the OpenJDK font
manager's layout lookup implementation. A attacker could specially
craft a font file that could cause a denial of service through
crashing the JVM (Java Virtual Machine) or possibly execute arbitrary
code. (CVE-2012-1713)
It was discovered that the SynthLookAndFeel class from Swing in
OpenJDK did not properly prevent access to cert
Red Hat
OpenJDK: insecure temporary file permissions (JRE, 7143606)
vendor_redhat·2012-06-12·CVSS 2.1
CVE-2012-1717 [LOW] CWE-732 OpenJDK: insecure temporary file permissions (JRE, 7143606)
OpenJDK: insecure temporary file permissions (JRE, 7143606)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.
Package: java-1.4.2-ibm-sap (Red Hat Enterprise Linux 6) - Affected
GHSA
GHSA-crx8-mq4w-pqc9: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update
ghsa_unreviewed·2022-05-14
CVE-2012-1717 [LOW] GHSA-crx8-mq4w-pqc9: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.htmlhttp://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-June/019076.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0734.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1243.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1455.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1456.htmlhttp://secunia.com/advisories/50659http://secunia.com/advisories/51080http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://www.ibm.com/support/docview.wss?uid=swg21615246http://www.mandriva.com/security/advisories?name=MDVSA-2012:095http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlhttp://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.htmlhttp://www.securityfocus.com/bid/53952http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.htmlhttp://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-June/019076.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0734.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1243.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1455.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1456.htmlhttp://secunia.com/advisories/50659http://secunia.com/advisories/51080http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://www.ibm.com/support/docview.wss?uid=swg21615246http://www.mandriva.com/security/advisories?name=MDVSA-2012:095http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlhttp://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.htmlhttp://www.securityfocus.com/bid/53952
2012-06-16
Published