CVE-2012-0503
First published: Wed Feb 15 2012(Updated: )
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun JRE | <=1.4.2_35 | |
| Sun JRE | =1.4.2 | |
| Sun JRE | =1.4.2_1 | |
| Sun JRE | =1.4.2_2 | |
| Sun JRE | =1.4.2_3 | |
| Sun JRE | =1.4.2_4 | |
| Sun JRE | =1.4.2_5 | |
| Sun JRE | =1.4.2_6 | |
| Sun JRE | =1.4.2_7 | |
| Sun JRE | =1.4.2_8 | |
| Sun JRE | =1.4.2_9 | |
| Sun JRE | =1.4.2_10 | |
| Sun JRE | =1.4.2_11 | |
| Sun JRE | =1.4.2_12 | |
| Sun JRE | =1.4.2_13 | |
| Sun JRE | =1.4.2_14 | |
| Sun JRE | =1.4.2_15 | |
| Sun JRE | =1.4.2_16 | |
| Sun JRE | =1.4.2_17 | |
| Sun JRE | =1.4.2_18 | |
| Sun JRE | =1.4.2_19 | |
| Sun JRE | =1.4.2_20 | |
| Sun JRE | =1.4.2_21 | |
| Sun JRE | =1.4.2_22 | |
| Sun JRE | =1.4.2_23 | |
| Sun JRE | =1.4.2_24 | |
| Sun JRE | =1.4.2_25 | |
| Sun JRE | =1.4.2_26 | |
| Sun JRE | =1.4.2_27 | |
| Sun JRE | =1.4.2_28 | |
| Sun JRE | =1.4.2_29 | |
| Sun JRE | =1.4.2_30 | |
| Sun JRE | =1.4.2_31 | |
| Sun JRE | =1.4.2_32 | |
| Sun JRE | =1.4.2_33 | |
| Sun JRE | =1.4.2_34 | |
| Sun JRE | <=1.5.0 | |
| Sun JRE | =1.5.0 | |
| Sun JRE | =1.5.0-update1 | |
| Sun JRE | =1.5.0-update10 | |
| Sun JRE | =1.5.0-update11 | |
| Sun JRE | =1.5.0-update12 | |
| Sun JRE | =1.5.0-update13 | |
| Sun JRE | =1.5.0-update14 | |
| Sun JRE | =1.5.0-update15 | |
| Sun JRE | =1.5.0-update16 | |
| Sun JRE | =1.5.0-update17 | |
| Sun JRE | =1.5.0-update18 | |
| Sun JRE | =1.5.0-update19 | |
| Sun JRE | =1.5.0-update2 | |
| Sun JRE | =1.5.0-update20 | |
| Sun JRE | =1.5.0-update21 | |
| Sun JRE | =1.5.0-update22 | |
| Sun JRE | =1.5.0-update23 | |
| Sun JRE | =1.5.0-update24 | |
| Sun JRE | =1.5.0-update25 | |
| Sun JRE | =1.5.0-update26 | |
| Sun JRE | =1.5.0-update27 | |
| Sun JRE | =1.5.0-update28 | |
| Sun JRE | =1.5.0-update29 | |
| Sun JRE | =1.5.0-update3 | |
| Sun JRE | =1.5.0-update31 | |
| Sun JRE | =1.5.0-update4 | |
| Sun JRE | =1.5.0-update5 | |
| Sun JRE | =1.5.0-update6 | |
| Sun JRE | =1.5.0-update7 | |
| Sun JRE | =1.5.0-update8 | |
| Sun JRE | =1.5.0-update9 | |
| Oracle Java Runtime Environment (JRE) | <=1.6.0 | |
| Oracle Java Runtime Environment (JRE) | =1.6.0-update22 | |
| Oracle Java Runtime Environment (JRE) | =1.6.0-update23 | |
| Oracle Java Runtime Environment (JRE) | =1.6.0-update24 | |
| Oracle Java Runtime Environment (JRE) | =1.6.0-update25 | |
| Oracle Java Runtime Environment (JRE) | =1.6.0-update26 | |
| Oracle Java Runtime Environment (JRE) | =1.6.0-update27 | |
| Oracle Java Runtime Environment (JRE) | =1.6.0-update29 | |
| Sun JRE | =1.6.0 | |
| Sun JRE | =1.6.0-update_1 | |
| Sun JRE | =1.6.0-update_10 | |
| Sun JRE | =1.6.0-update_11 | |
| Sun JRE | =1.6.0-update_12 | |
| Sun JRE | =1.6.0-update_13 | |
| Sun JRE | =1.6.0-update_14 | |
| Sun JRE | =1.6.0-update_15 | |
| Sun JRE | =1.6.0-update_16 | |
| Sun JRE | =1.6.0-update_17 | |
| Sun JRE | =1.6.0-update_18 | |
| Sun JRE | =1.6.0-update_19 | |
| Sun JRE | =1.6.0-update_2 | |
| Sun JRE | =1.6.0-update_20 | |
| Sun JRE | =1.6.0-update_21 | |
| Sun JRE | =1.6.0-update_3 | |
| Sun JRE | =1.6.0-update_4 | |
| Sun JRE | =1.6.0-update_5 | |
| Sun JRE | =1.6.0-update_6 | |
| Sun JRE | =1.6.0-update_7 | |
| Oracle Java Runtime Environment (JRE) | <=1.7.0 | |
| Oracle Java Runtime Environment (JRE) | =1.7.0 | |
| Oracle Java Runtime Environment (JRE) | =1.7.0-update1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00015.html
- http://marc.info/?l=bugtraq&m=133364885411663&w=2
- http://marc.info/?l=bugtraq&m=133365109612558&w=2
- http://marc.info/?l=bugtraq&m=133728004526190&w=2
- http://marc.info/?l=bugtraq&m=133847939902305&w=2
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0508.html
- http://rhn.redhat.com/errata/RHSA-2012-0514.html
- http://rhn.redhat.com/errata/RHSA-2012-0702.html
- http://rhn.redhat.com/errata/RHSA-2012-1080.html
- http://rhn.redhat.com/errata/RHSA-2013-1455.html
- http://secunia.com/advisories/48073
- http://secunia.com/advisories/48074
- http://secunia.com/advisories/48589
- http://secunia.com/advisories/48692
- http://secunia.com/advisories/48915
- http://secunia.com/advisories/48948
- http://secunia.com/advisories/48950
- http://secunia.com/advisories/49198
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://www.debian.org/security/2012/dsa-2420
- http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
- http://www.securityfocus.com/bid/52018
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14813
Frequently Asked Questions
What is the severity of CVE-2012-0503?
CVE-2012-0503 has been classified with a medium severity level, as it can compromise confidentiality.
How do I fix CVE-2012-0503?
To mitigate CVE-2012-0503, upgrade to the latest version of the Java Runtime Environment that is not affected by this vulnerability.
What software versions are affected by CVE-2012-0503?
CVE-2012-0503 affects Oracle Java SE 7 Update 2 and earlier, as well as Java SE 6 Update 30 and earlier.
Can CVE-2012-0503 be exploited remotely?
Yes, CVE-2012-0503 allows remote untrusted Java Web Start applications and applets to affect the system.
Is there a workaround for CVE-2012-0503?
One potential workaround is to disable Java in the web browser until the JRE can be updated.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/sun
- canonical/sun jre
- version/sun jre/1.4.2_35
- version/sun jre/1.4.2
- version/sun jre/1.4.2_1
- version/sun jre/1.4.2_2
- version/sun jre/1.4.2_3
- version/sun jre/1.4.2_4
- version/sun jre/1.4.2_5
- version/sun jre/1.4.2_6
- version/sun jre/1.4.2_7
- version/sun jre/1.4.2_8
- version/sun jre/1.4.2_9
- version/sun jre/1.4.2_10
- version/sun jre/1.4.2_11
- version/sun jre/1.4.2_12
- version/sun jre/1.4.2_13
- version/sun jre/1.4.2_14
- version/sun jre/1.4.2_15
- version/sun jre/1.4.2_16
- version/sun jre/1.4.2_17
- version/sun jre/1.4.2_18
- version/sun jre/1.4.2_19
- version/sun jre/1.4.2_20
- version/sun jre/1.4.2_21
- version/sun jre/1.4.2_22
- version/sun jre/1.4.2_23
- version/sun jre/1.4.2_24
- version/sun jre/1.4.2_25
- version/sun jre/1.4.2_26
- version/sun jre/1.4.2_27
- version/sun jre/1.4.2_28
- version/sun jre/1.4.2_29
- version/sun jre/1.4.2_30
- version/sun jre/1.4.2_31
- version/sun jre/1.4.2_32
- version/sun jre/1.4.2_33
- version/sun jre/1.4.2_34
- version/sun jre/1.5.0
- version/sun jre/1.5.0-update1
- version/sun jre/1.5.0-update10
- version/sun jre/1.5.0-update11
- version/sun jre/1.5.0-update12
- version/sun jre/1.5.0-update13
- version/sun jre/1.5.0-update14
- version/sun jre/1.5.0-update15
- version/sun jre/1.5.0-update16
- version/sun jre/1.5.0-update17
- version/sun jre/1.5.0-update18
- version/sun jre/1.5.0-update19
- version/sun jre/1.5.0-update2
- version/sun jre/1.5.0-update20
- version/sun jre/1.5.0-update21
- version/sun jre/1.5.0-update22
- version/sun jre/1.5.0-update23
- version/sun jre/1.5.0-update24
- version/sun jre/1.5.0-update25
- version/sun jre/1.5.0-update26
- version/sun jre/1.5.0-update27
- version/sun jre/1.5.0-update28
- version/sun jre/1.5.0-update29
- version/sun jre/1.5.0-update3
- version/sun jre/1.5.0-update31
- version/sun jre/1.5.0-update4
- version/sun jre/1.5.0-update5
- version/sun jre/1.5.0-update6
- version/sun jre/1.5.0-update7
- version/sun jre/1.5.0-update8
- version/sun jre/1.5.0-update9
- vendor/oracle
- canonical/oracle java runtime environment (jre)
- version/oracle java runtime environment (jre)/1.6.0
- version/oracle java runtime environment (jre)/1.6.0-update22
- version/oracle java runtime environment (jre)/1.6.0-update23
- version/oracle java runtime environment (jre)/1.6.0-update24
- version/oracle java runtime environment (jre)/1.6.0-update25
- version/oracle java runtime environment (jre)/1.6.0-update26
- version/oracle java runtime environment (jre)/1.6.0-update27
- version/oracle java runtime environment (jre)/1.6.0-update29
- version/sun jre/1.6.0
- version/sun jre/1.6.0-update_1
- version/sun jre/1.6.0-update_10
- version/sun jre/1.6.0-update_11
- version/sun jre/1.6.0-update_12
- version/sun jre/1.6.0-update_13
- version/sun jre/1.6.0-update_14
- version/sun jre/1.6.0-update_15
- version/sun jre/1.6.0-update_16
- version/sun jre/1.6.0-update_17
- version/sun jre/1.6.0-update_18
- version/sun jre/1.6.0-update_19
- version/sun jre/1.6.0-update_2
- version/sun jre/1.6.0-update_20
- version/sun jre/1.6.0-update_21
- version/sun jre/1.6.0-update_3
- version/sun jre/1.6.0-update_4
- version/sun jre/1.6.0-update_5
- version/sun jre/1.6.0-update_6
- version/sun jre/1.6.0-update_7
- version/oracle java runtime environment (jre)/1.7.0
- version/oracle java runtime environment (jre)/1.7.0-update1