CVE-2012-5076

Опубликовано: 16 окт. 2012

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Критический

Описание

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1386.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1391.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1467.html
Third Party Advisory
http://secunia.com/advisories/51029
Not Applicable
http://secunia.com/advisories/51326
Not Applicable
http://secunia.com/advisories/51390
Not Applicable
http://security.gentoo.org/glsa/glsa-201406-32.xml
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16641
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1386.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1391.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1467.html
Third Party Advisory
http://secunia.com/advisories/51029
Not Applicable
http://secunia.com/advisories/51326
Not Applicable
http://secunia.com/advisories/51390
Not Applicable
http://security.gentoo.org/glsa/glsa-201406-32.xml
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16641
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:jre:1.7.0:-:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.92498

Критический

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

CWE-284

Связанные уязвимости

CVE-2012-5076

CVSS3: 9.8

ubuntu

почти 13 лет назад

CVE-2012-5076

redhat

почти 13 лет назад

CVE-2012-5076

CVSS3: 9.8

debian

почти 13 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) compon ...

GHSA-v7gg-cccr-jpfx

CVSS3: 9.8

github

около 3 лет назад

ELSA-2012-1386

oracle-oval

почти 13 лет назад

ELSA-2012-1386: java-1.7.0-openjdk security update (IMPORTANT)

EPSS

Процентиль: 100%

0.92498

Критический

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

CWE-284