CVE-2012-0504: Critical severity oracle jre vulnerability

Q: What is the severity of CVE-2012-0504?

CVE-2012-0504 is considered a high severity vulnerability affecting Oracle Java SE 6 and 7.

Q: How do I fix CVE-2012-0504?

To fix CVE-2012-0504, ensure that you update the Java Runtime Environment to the latest version provided by Oracle.

Q: What are the affected software versions for CVE-2012-0504?

CVE-2012-0504 affects Oracle Java SE 7 Update 2 and earlier, and Oracle Java SE 6 Update 30 and earlier.

Q: Can CVE-2012-0504 be exploited remotely?

Yes, CVE-2012-0504 can be exploited remotely by attackers to impact confidentiality, integrity, and availability.

Q: What component is affected by CVE-2012-0504?

CVE-2012-0504 affects the Java Runtime Environment (JRE) component of Oracle Java.

Published Feb 15, 2012

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install and the Java Update mechanism.

Affected Software

63 affected components

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

ORACLE JRE<=1.6.0

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

Oracle JDK<=1.6.0

Oracle JDK=1.6.0-update22

Oracle JDK=1.6.0-update23

Oracle JDK=1.6.0-update24

Oracle JDK=1.6.0-update25

Oracle JDK=1.6.0-update26

Oracle JDK=1.6.0-update27

Oracle JDK=1.6.0-update29

Sun JDK=1.6.0

Sun JDK=1.6.0-update_10

Sun JDK=1.6.0-update_11

Sun JDK=1.6.0-update_12

Sun JDK=1.6.0-update_13

Sun JDK=1.6.0-update_14

Sun JDK=1.6.0-update_15

Sun JDK=1.6.0-update_16

Sun JDK=1.6.0-update_17

Sun JDK=1.6.0-update_18

Sun JDK=1.6.0-update_19

Sun JDK=1.6.0-update_20

Sun JDK=1.6.0-update_21

Sun JDK=1.6.0-update_3

Sun JDK=1.6.0-update_4

Sun JDK=1.6.0-update_5

Sun JDK=1.6.0-update_6

Sun JDK=1.6.0-update_7

Sun JDK=1.6.0-update1

Sun JDK=1.6.0-update1_b06

Sun JDK=1.6.0-update2

Event History

Feb 15, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0504?

CVE-2012-0504 is considered a high severity vulnerability affecting Oracle Java SE 6 and 7.

How do I fix CVE-2012-0504?

To fix CVE-2012-0504, ensure that you update the Java Runtime Environment to the latest version provided by Oracle.

What are the affected software versions for CVE-2012-0504?

CVE-2012-0504 affects Oracle Java SE 7 Update 2 and earlier, and Oracle Java SE 6 Update 30 and earlier.

Can CVE-2012-0504 be exploited remotely?

Yes, CVE-2012-0504 can be exploited remotely by attackers to impact confidentiality, integrity, and availability.

What component is affected by CVE-2012-0504?