CVE-2012-1725 — Oracle JDK vulnerability

6 documents6 sources

Severity

10.0CRITICALNVD

EPSS

4.8%

top 10.46%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle JDK Oracle JRE SUN JDK +1 more

Timeline

PublishedJun 16

Latest updateMay 14

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

▶NVDoracle/jdk1.7.0+3

▶NVDoracle/jre1.7.0+3

▶NVDsun/jdk1.5.0+2

▶NVDsun/jre1.5.0+2

🔴Vulnerability Details

GHSA

GHSA-57mh-hh97-hpf2: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 upd↗2022-05-14

▶

CVEList

CVE-2012-1725: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 upd↗2012-06-16

▶

📋Vendor Advisories

Ubuntu

OpenJDK 6 vulnerabilities↗2012-07-13

▶

Red Hat

OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757)↗2012-06-12

▶

💬Community

Bugzilla

CVE-2012-1725 OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757)↗2012-06-06

▶