CVE-2012-4301 Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a diffe...
HighCVSS 10.0
EPSS 8.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that this issue allows remote attackers to execute arbitrary code via an "invalid type case" in the init method of the D3DShader class in the com.sun.prism.d3d package. CPU.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle javafx | <= 2.2.4 | No fix listed |
| oracle javafx | = 2.0 | No fix listed |
| oracle javafx | = 2.0.2 | No fix listed |
| oracle javafx | = 2.0.3 | No fix listed |
| oracle javafx | = 2.1 | No fix listed |
| oracle javafx | = 2.2 | No fix listed |
| oracle javafx | = 2.2.3 | No fix listed |
References
- HPSBMU02874 vendor-advisory
- VU#858729 third-party-advisory us-government-resource
- www.oracle.com vendor-advisory
- TA13-032A third-party-advisory us-government-resource
- 20130201 Oracle Java SE JavaFx D3DShader Invalid Type Cast Vulnerability third-party-advisory
- oval:org.mitre.oval:def:16180 signature vdb-entry