Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-5088 — Oracle JDK vulnerability

7 documents7 sources
Severity
10.0CRITICALNVD
EPSS
79.3%
top 0.93%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Oracle JDKOracle JRE
Timeline
PublishedOct 16
Latest updateMay 17

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDoracle/jdk1.7.0+1
▶NVDoracle/jre1.7.0+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-4mvh-76x5-57p4: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect c↗2022-05-17
▶

💥Exploits & PoCs

2
Exploit-DB
Java Applet - Method Handle Remote Code Execution (Metasploit)↗2013-01-24
▶
Metasploit
Java Applet Method Handle Remote Code Execution↗
▶

📋Vendor Advisories

2
Ubuntu
OpenJDK vulnerabilities↗2012-10-26
▶
Red Hat
OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)↗2012-10-16
▶

💬Community

1
Bugzilla
CVE-2012-5088 OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)↗2012-10-11
▶
CVE-2012-5088 — Oracle JDK vulnerability | cvebase