CVE-2012-1713 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2...
HighCVSS 10.0
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | <= 1.7.0 | No fix listed |
| oracle jdk | <= 1.6.0 | No fix listed |
| oracle jre | <= 1.7.0 | No fix listed |
| oracle jre | <= 1.6.0 | No fix listed |
| sun jdk | <= 1.5.0 | No fix listed |
| sun jdk | <= 1.4.2_37 | No fix listed |
| sun jre | <= 1.5.0 | No fix listed |
| sun jre | <= 1.4.2_37 | No fix listed |
| oracle javafx | <= 2.1 | No fix listed |
References
- SUSE-SU-2012:1177 vendor-advisory
- SUSE-SU-2012:1204 vendor-advisory
- SUSE-SU-2012:1231 vendor-advisory
- SUSE-SU-2012:1265 vendor-advisory
- [OpenJDK] 20120612 IcedTea6 1.10.8 & 1.11.3 Released mailing-list
- SSRT100919 vendor-advisory
- RHSA-2012:0734 vendor-advisory
- RHSA-2012:1243 vendor-advisory
- RHSA-2013:1455 vendor-advisory
- RHSA-2013:1456 vendor-advisory
- 50659 third-party-advisory
- 51080 third-party-advisory
- GLSA-201406-32 vendor-advisory
- www.ibm.com
- MDVSA-2012:095 vendor-advisory
- MDVSA-2013:150 vendor-advisory
- www.oracle.com
- www.oracle.com vendor-advisory
- 53946 vdb-entry
- oval:org.mitre.oval:def:16502 signature vdb-entry