CVE-2012-4681 Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses Se...
CriticalCVSS 9.8
EPSS 98.5%
CISA KEV
added 2022-03-03 · due 2022-03-24
Ransomware
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.6.0 | No fix listed |
| oracle jdk | = 1.6.0-update1 | No fix listed |
| oracle jdk | = 1.6.0-update10 | No fix listed |
| oracle jdk | = 1.6.0-update11 | No fix listed |
| oracle jdk | = 1.6.0-update12 | No fix listed |
| oracle jdk | = 1.6.0-update13 | No fix listed |
| oracle jdk | = 1.6.0-update14 | No fix listed |
| oracle jdk | = 1.6.0-update15 | No fix listed |
| oracle jdk | = 1.6.0-update16 | No fix listed |
| oracle jdk | = 1.6.0-update17 | No fix listed |
| oracle jdk | = 1.6.0-update18 | No fix listed |
| oracle jdk | = 1.6.0-update19 | No fix listed |
| oracle jdk | = 1.6.0-update2 | No fix listed |
| oracle jdk | = 1.6.0-update20 | No fix listed |
| oracle jdk | = 1.6.0-update21 | No fix listed |
| oracle jdk | = 1.6.0-update22 | No fix listed |
| oracle jdk | = 1.6.0-update23 | No fix listed |
| oracle jdk | = 1.6.0-update24 | No fix listed |
| oracle jdk | = 1.6.0-update25 | No fix listed |
| oracle jdk | = 1.6.0-update26 | No fix listed |
| oracle jdk | = 1.6.0-update27 | No fix listed |
| oracle jdk | = 1.6.0-update29 | No fix listed |
| oracle jdk | = 1.6.0-update3 | No fix listed |
| oracle jdk | = 1.6.0-update30 | No fix listed |
| oracle jdk | = 1.6.0-update31 | No fix listed |
Show 60 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.6.0-update32 | No fix listed |
| oracle jdk | = 1.6.0-update33 | No fix listed |
| oracle jdk | = 1.6.0-update34 | No fix listed |
| oracle jdk | = 1.6.0-update4 | No fix listed |
| oracle jdk | = 1.6.0-update5 | No fix listed |
| oracle jdk | = 1.6.0-update6 | No fix listed |
| oracle jdk | = 1.6.0-update7 | No fix listed |
| oracle jdk | = 1.6.0-update8 | No fix listed |
| oracle jdk | = 1.6.0-update9 | No fix listed |
| oracle jdk | = 1.7.0 | No fix listed |
| oracle jdk | = 1.7.0-update1 | No fix listed |
| oracle jdk | = 1.7.0-update2 | No fix listed |
| oracle jdk | = 1.7.0-update3 | No fix listed |
| oracle jdk | = 1.7.0-update4 | No fix listed |
| oracle jdk | = 1.7.0-update5 | No fix listed |
| oracle jdk | = 1.7.0-update6 | No fix listed |
| oracle jre | = 1.6.0 | No fix listed |
| oracle jre | = 1.6.0-update1 | No fix listed |
| oracle jre | = 1.6.0-update10 | No fix listed |
| oracle jre | = 1.6.0-update11 | No fix listed |
| oracle jre | = 1.6.0-update12 | No fix listed |
| oracle jre | = 1.6.0-update13 | No fix listed |
| oracle jre | = 1.6.0-update14 | No fix listed |
| oracle jre | = 1.6.0-update15 | No fix listed |
| oracle jre | = 1.6.0-update16 | No fix listed |
| oracle jre | = 1.6.0-update17 | No fix listed |
| oracle jre | = 1.6.0-update18 | No fix listed |
| oracle jre | = 1.6.0-update19 | No fix listed |
| oracle jre | = 1.6.0-update2 | No fix listed |
| oracle jre | = 1.6.0-update20 | No fix listed |
| oracle jre | = 1.6.0-update21 | No fix listed |
| oracle jre | = 1.6.0-update22 | No fix listed |
| oracle jre | = 1.6.0-update23 | No fix listed |
| oracle jre | = 1.6.0-update24 | No fix listed |
| oracle jre | = 1.6.0-update25 | No fix listed |
| oracle jre | = 1.6.0-update26 | No fix listed |
| oracle jre | = 1.6.0-update27 | No fix listed |
| oracle jre | = 1.6.0-update29 | No fix listed |
| oracle jre | = 1.6.0-update3 | No fix listed |
| oracle jre | = 1.6.0-update30 | No fix listed |
| oracle jre | = 1.6.0-update31 | No fix listed |
| oracle jre | = 1.6.0-update32 | No fix listed |
| oracle jre | = 1.6.0-update33 | No fix listed |
| oracle jre | = 1.6.0-update34 | No fix listed |
| oracle jre | = 1.6.0-update4 | No fix listed |
| oracle jre | = 1.6.0-update5 | No fix listed |
| oracle jre | = 1.6.0-update6 | No fix listed |
| oracle jre | = 1.6.0-update7 | No fix listed |
| oracle jre | = 1.6.0-update9 | No fix listed |
| oracle jre | = 1.7.0 | No fix listed |
| oracle jre | = 1.7.0-update1 | No fix listed |
| oracle jre | = 1.7.0-update2 | No fix listed |
| oracle jre | = 1.7.0-update3 | No fix listed |
| oracle jre | = 1.7.0-update4 | No fix listed |
| oracle jre | = 1.7.0-update5 | No fix listed |
| oracle jre | = 1.7.0-update6 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 6.3 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- blog.fireeye.com third-party-advisory
- immunityproducts.blogspot.com exploit third-party-advisory
- labs.alienvault.com broken-link exploit
- SUSE-SU-2012:1231 mailing-list vendor-advisory
- SUSE-SU-2012:1398 mailing-list vendor-advisory
- SSRT100970 issue-tracking mailing-list third-party-advisory vendor-advisory
- RHSA-2012:1225 third-party-advisory vendor-advisory
- 51044 not-applicable third-party-advisory
- www.deependresearch.org broken-link third-party-advisory
- www.oracle.com vendor-advisory
- 55213 broken-link third-party-advisory vdb-entry
- TA12-240A third-party-advisory us-government-resource
- community.rapid7.com broken-link third-party-advisory
- www.cisa.gov government-resource us-government-resource