CVE-2012-1682: Critical severity Oracle JDK vulnerability

Published Aug 30, 2012
·
Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder."

Affected Software

14 affected components
Oracle JDK<=1.7.0
Oracle JDK=1.7.0
Oracle JDK=1.7.0-update1
Oracle JDK=1.7.0-update2
Oracle JDK=1.7.0-update3
Oracle JDK=1.7.0-update4
Oracle JDK=1.7.0-update5
ORACLE JRE<=1.7.0
ORACLE JRE=1.7.0
ORACLE JRE=1.7.0-update1
ORACLE JRE=1.7.0-update2
ORACLE JRE=1.7.0-update3
ORACLE JRE=1.7.0-update4
ORACLE JRE=1.7.0-update5

Event History

Aug 30, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2012-1682?

CVE-2012-1682 is considered a critical vulnerability that can affect the confidentiality, integrity, and availability of systems.

2

How do I fix CVE-2012-1682?

To fix CVE-2012-1682, you should upgrade to the latest version of the Oracle Java SE or JRE that addresses this vulnerability.

3

What versions are affected by CVE-2012-1682?

CVE-2012-1682 affects Oracle Java SE 7 Update 6 and earlier versions.

4

Can CVE-2012-1682 be exploited remotely?

Yes, CVE-2012-1682 can be exploited remotely by attackers through unknown vectors.

5

What components of Java are impacted by CVE-2012-1682?

CVE-2012-1682 specifically impacts the Java Runtime Environment (JRE) component.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203