CVE-2012-1682 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via un...
HighCVSS 10.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | <= 1.7.0 | No fix listed |
| oracle jdk | = 1.7.0 | No fix listed |
| oracle jdk | = 1.7.0-update1 | No fix listed |
| oracle jdk | = 1.7.0-update2 | No fix listed |
| oracle jdk | = 1.7.0-update3 | No fix listed |
| oracle jdk | = 1.7.0-update4 | No fix listed |
| oracle jdk | = 1.7.0-update5 | No fix listed |
| oracle jre | <= 1.7.0 | No fix listed |
| oracle jre | = 1.7.0 | No fix listed |
| oracle jre | = 1.7.0-update1 | No fix listed |
| oracle jre | = 1.7.0-update2 | No fix listed |
| oracle jre | = 1.7.0-update3 | No fix listed |
| oracle jre | = 1.7.0-update4 | No fix listed |
| oracle jre | = 1.7.0-update5 | No fix listed |
References
- SUSE-SU-2012:1148 vendor-advisory
- openSUSE-SU-2012:1175 vendor-advisory
- SUSE-SU-2012:1231 vendor-advisory
- SSRT100970 vendor-advisory
- RHSA-2012:1222 vendor-advisory
- RHSA-2012:1225 vendor-advisory
- RHSA-2012:1466 vendor-advisory
- RHSA-2013:1455 vendor-advisory
- RHSA-2013:1456 vendor-advisory
- 51044 third-party-advisory
- 51327 third-party-advisory
- www.oracle.com vendor-advisory
- USN-1553-1 vendor-advisory