CVE-2012-1541 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, an...
HighCVSS 10.0
EPSS 10.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit-based browsers and the Javascript engine, which allows remote attackers to execute arbitrary code by modifying DOM nodes that contain applet elements in a way that triggers an incorrect reference count and a use after free.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jre | = 1.7.0 | No fix listed |
| oracle jre | = 1.7.0-update1 | No fix listed |
| oracle jre | = 1.7.0-update10 | No fix listed |
| oracle jre | = 1.7.0-update11 | No fix listed |
| oracle jre | = 1.7.0-update2 | No fix listed |
| oracle jre | = 1.7.0-update3 | No fix listed |
| oracle jre | = 1.7.0-update4 | No fix listed |
| oracle jre | = 1.7.0-update5 | No fix listed |
| oracle jre | = 1.7.0-update6 | No fix listed |
| oracle jre | = 1.7.0-update7 | No fix listed |
| oracle jre | = 1.7.0-update9 | No fix listed |
| oracle jre | = 1.6.0-update22 | No fix listed |
| oracle jre | = 1.6.0-update23 | No fix listed |
| oracle jre | = 1.6.0-update24 | No fix listed |
| oracle jre | = 1.6.0-update25 | No fix listed |
| oracle jre | = 1.6.0-update26 | No fix listed |
| oracle jre | = 1.6.0-update27 | No fix listed |
| oracle jre | = 1.6.0-update29 | No fix listed |
| oracle jre | = 1.6.0-update30 | No fix listed |
| oracle jre | = 1.6.0-update31 | No fix listed |
| oracle jre | = 1.6.0-update32 | No fix listed |
| oracle jre | = 1.6.0-update33 | No fix listed |
| oracle jre | = 1.6.0-update34 | No fix listed |
| oracle jre | = 1.6.0-update35 | No fix listed |
| oracle jre | = 1.6.0-update37 | No fix listed |
Show 69 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jre | = 1.6.0-update38 | No fix listed |
| oracle jdk | = 1.7.0 | No fix listed |
| oracle jdk | = 1.7.0-update1 | No fix listed |
| oracle jdk | = 1.7.0-update10 | No fix listed |
| oracle jdk | = 1.7.0-update11 | No fix listed |
| oracle jdk | = 1.7.0-update2 | No fix listed |
| oracle jdk | = 1.7.0-update3 | No fix listed |
| oracle jdk | = 1.7.0-update4 | No fix listed |
| oracle jdk | = 1.7.0-update5 | No fix listed |
| oracle jdk | = 1.7.0-update6 | No fix listed |
| oracle jdk | = 1.7.0-update7 | No fix listed |
| oracle jdk | = 1.7.0-update9 | No fix listed |
| oracle jdk | = 1.6.0-update22 | No fix listed |
| oracle jdk | = 1.6.0-update23 | No fix listed |
| oracle jdk | = 1.6.0-update24 | No fix listed |
| oracle jdk | = 1.6.0-update25 | No fix listed |
| oracle jdk | = 1.6.0-update26 | No fix listed |
| oracle jdk | = 1.6.0-update27 | No fix listed |
| oracle jdk | = 1.6.0-update29 | No fix listed |
| oracle jdk | = 1.6.0-update30 | No fix listed |
| oracle jdk | = 1.6.0-update31 | No fix listed |
| oracle jdk | = 1.6.0-update32 | No fix listed |
| oracle jdk | = 1.6.0-update33 | No fix listed |
| oracle jdk | = 1.6.0-update34 | No fix listed |
| oracle jdk | = 1.6.0-update35 | No fix listed |
| oracle jdk | = 1.6.0-update37 | No fix listed |
| oracle jdk | = 1.6.0-update38 | No fix listed |
| sun jre | = 1.6.0 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_10 | No fix listed |
| sun jre | = 1.6.0-update_11 | No fix listed |
| sun jre | = 1.6.0-update_12 | No fix listed |
| sun jre | = 1.6.0-update_13 | No fix listed |
| sun jre | = 1.6.0-update_14 | No fix listed |
| sun jre | = 1.6.0-update_15 | No fix listed |
| sun jre | = 1.6.0-update_16 | No fix listed |
| sun jre | = 1.6.0-update_17 | No fix listed |
| sun jre | = 1.6.0-update_18 | No fix listed |
| sun jre | = 1.6.0-update_19 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun jre | = 1.6.0-update_20 | No fix listed |
| sun jre | = 1.6.0-update_21 | No fix listed |
| sun jre | = 1.6.0-update_3 | No fix listed |
| sun jre | = 1.6.0-update_4 | No fix listed |
| sun jre | = 1.6.0-update_5 | No fix listed |
| sun jre | = 1.6.0-update_6 | No fix listed |
| sun jre | = 1.6.0-update_7 | No fix listed |
| sun jre | = 1.6.0-update_9 | No fix listed |
| sun jdk | = 1.6.0 | No fix listed |
| sun jdk | = 1.6.0-update_10 | No fix listed |
| sun jdk | = 1.6.0-update_11 | No fix listed |
| sun jdk | = 1.6.0-update_12 | No fix listed |
| sun jdk | = 1.6.0-update_13 | No fix listed |
| sun jdk | = 1.6.0-update_14 | No fix listed |
| sun jdk | = 1.6.0-update_15 | No fix listed |
| sun jdk | = 1.6.0-update_16 | No fix listed |
| sun jdk | = 1.6.0-update_17 | No fix listed |
| sun jdk | = 1.6.0-update_18 | No fix listed |
| sun jdk | = 1.6.0-update_19 | No fix listed |
| sun jdk | = 1.6.0-update_20 | No fix listed |
| sun jdk | = 1.6.0-update_21 | No fix listed |
| sun jdk | = 1.6.0-update_3 | No fix listed |
| sun jdk | = 1.6.0-update_4 | No fix listed |
| sun jdk | = 1.6.0-update_5 | No fix listed |
| sun jdk | = 1.6.0-update_6 | No fix listed |
| sun jdk | = 1.6.0-update_7 | No fix listed |
| sun jdk | = 1.6.0-update1 | No fix listed |
| sun jdk | = 1.6.0-update1_b06 | No fix listed |
| sun jdk | = 1.6.0-update2 | No fix listed |
References
- HPSBUX02857 vendor-advisory
- SSRT101156 vendor-advisory
- HPSBMU02874 vendor-advisory
- RHSA-2013:0236 vendor-advisory
- RHSA-2013:0237 vendor-advisory
- RHSA-2013:1455 vendor-advisory
- RHSA-2013:1456 vendor-advisory
- VU#858729 third-party-advisory us-government-resource
- www.oracle.com vendor-advisory
- 57697 vdb-entry
- TA13-032A third-party-advisory us-government-resource
- 20130201 Multiple Vendor WebKit JRE Plugin Module Use-after-Free Vulnerability third-party-advisory
- oval:org.mitre.oval:def:16384 signature vdb-entry
- oval:org.mitre.oval:def:19070 signature vdb-entry
- oval:org.mitre.oval:def:19499 signature vdb-entry