CVE-2012-0503: High severity sun java runtime environment (jre) vulnerability

Q: What is the severity of CVE-2012-0503?

CVE-2012-0503 has been classified with a medium severity level, as it can compromise confidentiality.

Q: How do I fix CVE-2012-0503?

To mitigate CVE-2012-0503, upgrade to the latest version of the Java Runtime Environment that is not affected by this vulnerability.

Q: What software versions are affected by CVE-2012-0503?

CVE-2012-0503 affects Oracle Java SE 7 Update 2 and earlier, as well as Java SE 6 Update 30 and earlier.

Q: Can CVE-2012-0503 be exploited remotely?

Yes, CVE-2012-0503 allows remote untrusted Java Web Start applications and applets to affect the system.

Q: Is there a workaround for CVE-2012-0503?

One potential workaround is to disable Java in the web browser until the JRE can be updated.

Published Feb 15, 2012

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n.

Affected Software

99 affected components

Sun JRE<=1.4.2_35

Sun JRE=1.4.2

Sun JRE=1.4.2_1

Sun JRE=1.4.2_2

Sun JRE=1.4.2_3

Sun JRE=1.4.2_4

Sun JRE=1.4.2_5

Sun JRE=1.4.2_6

Sun JRE=1.4.2_7

Sun JRE=1.4.2_8

Sun JRE=1.4.2_9

Sun JRE=1.4.2_10

Sun JRE=1.4.2_11

Sun JRE=1.4.2_12

Sun JRE=1.4.2_13

Sun JRE=1.4.2_14

Sun JRE=1.4.2_15

Sun JRE=1.4.2_16

Sun JRE=1.4.2_17

Sun JRE=1.4.2_18

Sun JRE=1.4.2_19

Sun JRE=1.4.2_20

Sun JRE=1.4.2_21

Sun JRE=1.4.2_22

Sun JRE=1.4.2_23

Sun JRE=1.4.2_24

Sun JRE=1.4.2_25

Sun JRE=1.4.2_26

Sun JRE=1.4.2_27

Sun JRE=1.4.2_28

Sun JRE=1.4.2_29

Sun JRE=1.4.2_30

Sun JRE=1.4.2_31

Sun JRE=1.4.2_32

Sun JRE=1.4.2_33

Sun JRE=1.4.2_34

Sun JRE<=1.5.0

Sun JRE=1.5.0

Sun JRE=1.5.0-update1

Sun JRE=1.5.0-update10

Sun JRE=1.5.0-update11

Sun JRE=1.5.0-update12

Sun JRE=1.5.0-update13

Sun JRE=1.5.0-update14

Sun JRE=1.5.0-update15

Sun JRE=1.5.0-update16

Sun JRE=1.5.0-update17

Sun JRE=1.5.0-update18

Sun JRE=1.5.0-update19

Sun JRE=1.5.0-update2

Sun JRE=1.5.0-update20

Sun JRE=1.5.0-update21

Sun JRE=1.5.0-update22

Sun JRE=1.5.0-update23

Sun JRE=1.5.0-update24

Sun JRE=1.5.0-update25

Sun JRE=1.5.0-update26

Sun JRE=1.5.0-update27

Sun JRE=1.5.0-update28

Sun JRE=1.5.0-update29

Sun JRE=1.5.0-update3

Sun JRE=1.5.0-update31

Sun JRE=1.5.0-update4

Sun JRE=1.5.0-update5

Sun JRE=1.5.0-update6

Sun JRE=1.5.0-update7

Sun JRE=1.5.0-update8

Sun JRE=1.5.0-update9

ORACLE JRE<=1.6.0

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

Event History

Feb 15, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0503?

CVE-2012-0503 has been classified with a medium severity level, as it can compromise confidentiality.

How do I fix CVE-2012-0503?

To mitigate CVE-2012-0503, upgrade to the latest version of the Java Runtime Environment that is not affected by this vulnerability.

What software versions are affected by CVE-2012-0503?