CVE-2012-1723 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows re...
HighCVSS 10.0
EPSS 93.6%
CISA KEV
added 2022-03-03 · due 2022-03-24
Ransomware
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | <= 1.4.2_37 | No fix listed |
| oracle jdk | = 1.5.0 | No fix listed |
| oracle jdk | = 1.5.0-update1 | No fix listed |
| oracle jdk | = 1.5.0-update10 | No fix listed |
| oracle jdk | = 1.5.0-update11 | No fix listed |
| oracle jdk | = 1.5.0-update12 | No fix listed |
| oracle jdk | = 1.5.0-update13 | No fix listed |
| oracle jdk | = 1.5.0-update14 | No fix listed |
| oracle jdk | = 1.5.0-update15 | No fix listed |
| oracle jdk | = 1.5.0-update16 | No fix listed |
| oracle jdk | = 1.5.0-update17 | No fix listed |
| oracle jdk | = 1.5.0-update18 | No fix listed |
| oracle jdk | = 1.5.0-update19 | No fix listed |
| oracle jdk | = 1.5.0-update2 | No fix listed |
| oracle jdk | = 1.5.0-update20 | No fix listed |
| oracle jdk | = 1.5.0-update21 | No fix listed |
| oracle jdk | = 1.5.0-update22 | No fix listed |
| oracle jdk | = 1.5.0-update23 | No fix listed |
| oracle jdk | = 1.5.0-update24 | No fix listed |
| oracle jdk | = 1.5.0-update25 | No fix listed |
| oracle jdk | = 1.5.0-update26 | No fix listed |
| oracle jdk | = 1.5.0-update27 | No fix listed |
| oracle jdk | = 1.5.0-update28 | No fix listed |
| oracle jdk | = 1.5.0-update29 | No fix listed |
| oracle jdk | = 1.5.0-update3 | No fix listed |
Show 111 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.5.0-update30 | No fix listed |
| oracle jdk | = 1.5.0-update31 | No fix listed |
| oracle jdk | = 1.5.0-update32 | No fix listed |
| oracle jdk | = 1.5.0-update33 | No fix listed |
| oracle jdk | = 1.5.0-update34 | No fix listed |
| oracle jdk | = 1.5.0-update35 | No fix listed |
| oracle jdk | = 1.6.0 | No fix listed |
| oracle jdk | = 1.6.0-update1 | No fix listed |
| oracle jdk | = 1.6.0-update10 | No fix listed |
| oracle jdk | = 1.6.0-update11 | No fix listed |
| oracle jdk | = 1.6.0-update12 | No fix listed |
| oracle jdk | = 1.6.0-update13 | No fix listed |
| oracle jdk | = 1.6.0-update14 | No fix listed |
| oracle jdk | = 1.6.0-update15 | No fix listed |
| oracle jdk | = 1.6.0-update16 | No fix listed |
| oracle jdk | = 1.6.0-update17 | No fix listed |
| oracle jdk | = 1.6.0-update18 | No fix listed |
| oracle jdk | = 1.6.0-update19 | No fix listed |
| oracle jdk | = 1.6.0-update2 | No fix listed |
| oracle jdk | = 1.6.0-update20 | No fix listed |
| oracle jdk | = 1.6.0-update21 | No fix listed |
| oracle jdk | = 1.6.0-update22 | No fix listed |
| oracle jdk | = 1.6.0-update23 | No fix listed |
| oracle jdk | = 1.6.0-update24 | No fix listed |
| oracle jdk | = 1.6.0-update25 | No fix listed |
| oracle jdk | = 1.6.0-update26 | No fix listed |
| oracle jdk | = 1.6.0-update27 | No fix listed |
| oracle jdk | = 1.6.0-update29 | No fix listed |
| oracle jdk | = 1.6.0-update3 | No fix listed |
| oracle jdk | = 1.6.0-update30 | No fix listed |
| oracle jdk | = 1.6.0-update31 | No fix listed |
| oracle jdk | = 1.6.0-update32 | No fix listed |
| oracle jdk | = 1.6.0-update32_b31 | No fix listed |
| oracle jdk | = 1.6.0-update32_b32 | No fix listed |
| oracle jdk | = 1.7.0 | No fix listed |
| oracle jdk | = 1.7.0-update1 | No fix listed |
| oracle jdk | = 1.7.0-update2 | No fix listed |
| oracle jdk | = 1.7.0-update3 | No fix listed |
| oracle jdk | = 1.7.0-update4 | No fix listed |
| oracle jre | <= 1.4.2_37 | No fix listed |
| oracle jre | = 1.5.0 | No fix listed |
| oracle jre | = 1.5.0-update1 | No fix listed |
| oracle jre | = 1.5.0-update10 | No fix listed |
| oracle jre | = 1.5.0-update11 | No fix listed |
| oracle jre | = 1.5.0-update12 | No fix listed |
| oracle jre | = 1.5.0-update13 | No fix listed |
| oracle jre | = 1.5.0-update14 | No fix listed |
| oracle jre | = 1.5.0-update15 | No fix listed |
| oracle jre | = 1.5.0-update16 | No fix listed |
| oracle jre | = 1.5.0-update17 | No fix listed |
| oracle jre | = 1.5.0-update18 | No fix listed |
| oracle jre | = 1.5.0-update19 | No fix listed |
| oracle jre | = 1.5.0-update2 | No fix listed |
| oracle jre | = 1.5.0-update20 | No fix listed |
| oracle jre | = 1.5.0-update21 | No fix listed |
| oracle jre | = 1.5.0-update22 | No fix listed |
| oracle jre | = 1.5.0-update23 | No fix listed |
| oracle jre | = 1.5.0-update24 | No fix listed |
| oracle jre | = 1.5.0-update25 | No fix listed |
| oracle jre | = 1.5.0-update26 | No fix listed |
| oracle jre | = 1.5.0-update27 | No fix listed |
| oracle jre | = 1.5.0-update28 | No fix listed |
| oracle jre | = 1.5.0-update29 | No fix listed |
| oracle jre | = 1.5.0-update3 | No fix listed |
| oracle jre | = 1.5.0-update30 | No fix listed |
| oracle jre | = 1.5.0-update31 | No fix listed |
| oracle jre | = 1.5.0-update32 | No fix listed |
| oracle jre | = 1.5.0-update33 | No fix listed |
| oracle jre | = 1.5.0-update34 | No fix listed |
| oracle jre | = 1.5.0-update35 | No fix listed |
| oracle jre | = 1.6.0 | No fix listed |
| oracle jre | = 1.6.0-update1 | No fix listed |
| oracle jre | = 1.6.0-update10 | No fix listed |
| oracle jre | = 1.6.0-update11 | No fix listed |
| oracle jre | = 1.6.0-update12 | No fix listed |
| oracle jre | = 1.6.0-update13 | No fix listed |
| oracle jre | = 1.6.0-update14 | No fix listed |
| oracle jre | = 1.6.0-update15 | No fix listed |
| oracle jre | = 1.6.0-update16 | No fix listed |
| oracle jre | = 1.6.0-update17 | No fix listed |
| oracle jre | = 1.6.0-update18 | No fix listed |
| oracle jre | = 1.6.0-update19 | No fix listed |
| oracle jre | = 1.6.0-update2 | No fix listed |
| oracle jre | = 1.6.0-update20 | No fix listed |
| oracle jre | = 1.6.0-update21 | No fix listed |
| oracle jre | = 1.6.0-update22 | No fix listed |
| oracle jre | = 1.6.0-update23 | No fix listed |
| oracle jre | = 1.6.0-update24 | No fix listed |
| oracle jre | = 1.6.0-update25 | No fix listed |
| oracle jre | = 1.6.0-update26 | No fix listed |
| oracle jre | = 1.6.0-update27 | No fix listed |
| oracle jre | = 1.6.0-update29 | No fix listed |
| oracle jre | = 1.6.0-update3 | No fix listed |
| oracle jre | = 1.6.0-update30 | No fix listed |
| oracle jre | = 1.6.0-update31 | No fix listed |
| oracle jre | = 1.6.0-update32 | No fix listed |
| oracle jre | = 1.7.0 | No fix listed |
| oracle jre | = 1.7.0-update1 | No fix listed |
| oracle jre | = 1.7.0-update2 | No fix listed |
| oracle jre | = 1.7.0-update3 | No fix listed |
| oracle jre | = 1.7.0-update4 | No fix listed |
| redhat icedtea6 | < 1.10.8 | 1.10.8 |
| redhat icedtea6 | >= 1.11.0, < 1.11.3 | 1.11.3 |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 6.2 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server aus | = 6.2 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- [OpenJDK] 20120612 IcedTea6 1.10.8 & 1.11.3 Released mailing-list
- SSRT100919 mailing-list vendor-advisory
- RHSA-2012:0734 third-party-advisory vendor-advisory
- 51080 broken-link third-party-advisory
- GLSA-201406-32 third-party-advisory vendor-advisory
- www.ibm.com broken-link
- MDVSA-2012:095 broken-link vendor-advisory
- www.oracle.com vendor-advisory
- 53960 broken-link third-party-advisory vdb-entry
- oval:org.mitre.oval:def:16259 broken-link signature vdb-entry
- www.cisa.gov government-resource us-government-resource