CVE-2012-0500
high · 10Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
10
CVSS
59.2%
EPSS (exploit prob.)
99th
EPSS percentile
2012-02-15
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| oracle | jre | <= 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| sun | jre | 1.6.0 |
| oracle | jre | <= 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.7.0 |
| oracle | javafx | <= 2.0.2 |
| oracle | javafx | 1.2 |
| oracle | javafx | 1.2.2 |
| oracle | javafx | 1.2.3 |
| oracle | javafx | 1.3.0 |
| oracle | javafx | 1.3.1 |
| oracle | javafx | 2.0 |
Check a specific version with /api/v1/cve/match.
References
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html
- http://marc.info/?l=bugtraq&m=133364885411663&w=2
- http://marc.info/?l=bugtraq&m=133847939902305&w=2
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0514.html
- http://rhn.redhat.com/errata/RHSA-2013-1455.html
- http://secunia.com/advisories/48073
- http://secunia.com/advisories/48589
- http://secunia.com/advisories/48950
- http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
- http://www.securityfocus.com/bid/52015
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14844
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html
- http://marc.info/?l=bugtraq&m=133364885411663&w=2
- http://marc.info/?l=bugtraq&m=133847939902305&w=2
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0514.html
- http://rhn.redhat.com/errata/RHSA-2013-1455.html
- http://secunia.com/advisories/48073
- http://secunia.com/advisories/48589
- http://secunia.com/advisories/48950
- http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
- http://www.securityfocus.com/bid/52015
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-0500