CVE-2012-4301

published 2013-02-02

CVE-2012-4301: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and…

Priority P3 56 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that this issue allows remote attackers to execute arbitrary code via an "invalid type case" in the init method of the D3DShader class in the com.sun.prism.d3d package. CPU.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
oracle	javafx	<= 2.2.4	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—
oracle	javafx	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.