CVE-2012-5072

Published: Oct 16, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.

Affected (82)

Products: Oracle: Jdk, Jre · Sun: Jdk, Jre

2 products

2 products

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Up to 1.7.0
Oracle Jdk	Version 1.7.0
Oracle Jdk	Version 1.7.0 update1
Oracle Jdk	Version 1.7.0 update2
Oracle Jdk	Version 1.7.0 update3
Oracle Jdk	Version 1.7.0 update4
Oracle Jdk	Version 1.7.0 update5
Oracle Jdk	Version 1.7.0 update6
Oracle Jre	Up to 1.7.0
Oracle Jre	Version 1.7.0
Oracle Jre	Version 1.7.0 update1
Oracle Jre	Version 1.7.0 update2
Oracle Jre	Version 1.7.0 update3
Oracle Jre	Version 1.7.0 update4
Oracle Jre	Version 1.7.0 update5
Oracle Jre	Version 1.7.0 update6

Configuration B

66 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Up to 1.6.0
Oracle Jdk	Version 1.6.0 update22
Oracle Jdk	Version 1.6.0 update23
Oracle Jdk	Version 1.6.0 update24
Oracle Jdk	Version 1.6.0 update25
Oracle Jdk	Version 1.6.0 update26
Oracle Jdk	Version 1.6.0 update27
Oracle Jdk	Version 1.6.0 update29
Oracle Jdk	Version 1.6.0 update30
Oracle Jdk	Version 1.6.0 update31
Oracle Jdk	Version 1.6.0 update32
Oracle Jdk	Version 1.6.0 update33
Oracle Jdk	Version 1.6.0 update34
Oracle Jre	Up to 1.6.0
Oracle Jre	Version 1.6.0 update22
Oracle Jre	Version 1.6.0 update23
Oracle Jre	Version 1.6.0 update24
Oracle Jre	Version 1.6.0 update25
Oracle Jre	Version 1.6.0 update26
Oracle Jre	Version 1.6.0 update27
Oracle Jre	Version 1.6.0 update29
Oracle Jre	Version 1.6.0 update30
Oracle Jre	Version 1.6.0 update31
Oracle Jre	Version 1.6.0 update32
Oracle Jre	Version 1.6.0 update33
Oracle Jre	Version 1.6.0 update34
Sun Jdk	Version 1.6.0.200 update20
Sun Jdk	Version 1.6.0.210 update21
Sun Jdk	Version 1.6.0 update1
Sun Jdk	Version 1.6.0 update1_b06
Sun Jdk	Version 1.6.0 update2
Sun Jdk	Version 1.6.0 update_10
Sun Jdk	Version 1.6.0 update_11
Sun Jdk	Version 1.6.0 update_12
Sun Jdk	Version 1.6.0 update_13
Sun Jdk	Version 1.6.0 update_14
Sun Jdk	Version 1.6.0 update_15
Sun Jdk	Version 1.6.0 update_16
Sun Jdk	Version 1.6.0 update_17
Sun Jdk	Version 1.6.0 update_18
Sun Jdk	Version 1.6.0 update_19
Sun Jdk	Version 1.6.0 update_3
Sun Jdk	Version 1.6.0 update_4
Sun Jdk	Version 1.6.0 update_5
Sun Jdk	Version 1.6.0 update_6
Sun Jdk	Version 1.6.0 update_7
Sun Jre	Version 1.6.0
Sun Jre	Version 1.6.0 update_10
Sun Jre	Version 1.6.0 update_11
Sun Jre	Version 1.6.0 update_12
Sun Jre	Version 1.6.0 update_13
Sun Jre	Version 1.6.0 update_14
Sun Jre	Version 1.6.0 update_15
Sun Jre	Version 1.6.0 update_16
Sun Jre	Version 1.6.0 update_17
Sun Jre	Version 1.6.0 update_18
Sun Jre	Version 1.6.0 update_19
Sun Jre	Version 1.6.0 update_1
Sun Jre	Version 1.6.0 update_20
Sun Jre	Version 1.6.0 update_21
Sun Jre	Version 1.6.0 update_2
Sun Jre	Version 1.6.0 update_3
Sun Jre	Version 1.6.0 update_4
Sun Jre	Version 1.6.0 update_5
Sun Jre	Version 1.6.0 update_6
Sun Jre	Version 1.6.0 update_7

References (62)

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=135542848327757&w=2

Source: secalert_us@oracle.com

http://marc.info/?l=bugtraq&m=135758563611658&w=2

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2012-1385.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2012-1386.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2012-1391.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2012-1392.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2012-1466.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2012-1467.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2013-1455.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2013-1456.html

Source: secalert_us@oracle.com

http://secunia.com/advisories/51028

Source: secalert_us@oracle.com

http://secunia.com/advisories/51029

Source: secalert_us@oracle.com

http://secunia.com/advisories/51141

Source: secalert_us@oracle.com

http://secunia.com/advisories/51166

Source: secalert_us@oracle.com

http://secunia.com/advisories/51326

Source: secalert_us@oracle.com

http://secunia.com/advisories/51327

Source: secalert_us@oracle.com

http://secunia.com/advisories/51390

Source: secalert_us@oracle.com

http://secunia.com/advisories/51438

Source: secalert_us@oracle.com

http://security.gentoo.org/glsa/glsa-201406-32.xml

Source: secalert_us@oracle.com

http://www-01.ibm.com/support/docview.wss?uid=swg21616490

Source: secalert_us@oracle.com

http://www-01.ibm.com/support/docview.wss?uid=swg21620037

Source: secalert_us@oracle.com

http://www-01.ibm.com/support/docview.wss?uid=swg21621154

Source: secalert_us@oracle.com

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/56083

Source: secalert_us@oracle.com

http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

Source: secalert_us@oracle.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/79434

Source: secalert_us@oracle.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16522

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html