Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-5086

Опубликовано: 16 окт. 2012
Источник: redhat
CVSS2: 6.8

Описание

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5java-1.6.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.7.0-ibmAffected
Red Hat Enterprise Linux 5java-1.7.0-openjdkAffected
Red Hat Enterprise Linux 5java-1.7.0-oracleAffected
Red Hat Enterprise Linux 6java-1.6.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.6.0-openjdkFixedRHSA-2012:138517.10.2012
Red Hat Enterprise Linux 6java-1.6.0-openjdkFixedRHSA-2012:138417.10.2012
Red Hat Enterprise Linux 6java-1.7.0-openjdkFixedRHSA-2012:138617.10.2012
Supplementary for Red Hat Enterprise Linux 5java-1.6.0-sunFixedRHSA-2012:139218.10.2012
Supplementary for Red Hat Enterprise Linux 6java-1.7.0-oracleFixedRHSA-2012:139118.10.2012

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=865428OpenJDK: XMLDecoder sandbox restriction bypass (Beans, 7195917)

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

nvd
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

debian
больше 13 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) compon ...

github
больше 3 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

oracle-oval
больше 13 лет назад

ELSA-2012-1385: java-1.6.0-openjdk security update (IMPORTANT)

6.8 Medium

CVSS2