CVE-2012-1717: Low severity Oracle JRE vulnerability
Published Jun 16, 2012
·Updated
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.
Affected Software
172 affected components
Oracle JRE>=1.4.2<=1.4.2_37
Oracle JRE=1.5.0
Oracle JRE=1.5.0-update1
Oracle JRE=1.5.0-update10
Oracle JRE=1.5.0-update11
Oracle JRE=1.5.0-update12
Oracle JRE=1.5.0-update13
Oracle JRE=1.5.0-update14
Oracle JRE=1.5.0-update15
Oracle JRE=1.5.0-update16
Oracle JRE=1.5.0-update17
Oracle JRE=1.5.0-update18
Oracle JRE=1.5.0-update19
Oracle JRE=1.5.0-update2
Oracle JRE=1.5.0-update20
Oracle JRE=1.5.0-update21
Oracle JRE=1.5.0-update22
Oracle JRE=1.5.0-update23
Oracle JRE=1.5.0-update24
Oracle JRE=1.5.0-update25
Oracle JRE=1.5.0-update26
Oracle JRE=1.5.0-update27
Oracle JRE=1.5.0-update28
Oracle JRE=1.5.0-update29
Oracle JRE=1.5.0-update3
Oracle JRE=1.5.0-update30
Oracle JRE=1.5.0-update31
Oracle JRE=1.5.0-update32
Oracle JRE=1.5.0-update33
Oracle JRE=1.5.0-update34
Oracle JRE=1.5.0-update35
Oracle JRE=1.5.0-update4
Oracle JRE=1.5.0-update5
Oracle JRE=1.5.0-update6
Oracle JRE=1.5.0-update7
Oracle JRE=1.5.0-update8
Oracle JRE=1.5.0-update9
Oracle JRE=1.6.0
Oracle JRE=1.6.0-update1
Oracle JRE=1.6.0-update10
Oracle JRE=1.6.0-update11
Oracle JRE=1.6.0-update12
Oracle JRE=1.6.0-update13
Oracle JRE=1.6.0-update14
Oracle JRE=1.6.0-update15
Oracle JRE=1.6.0-update16
Oracle JRE=1.6.0-update17
Oracle JRE=1.6.0-update18
Oracle JRE=1.6.0-update19
Oracle JRE=1.6.0-update2
Oracle JRE=1.6.0-update20
Oracle JRE=1.6.0-update21
Oracle JRE=1.6.0-update22
Oracle JRE=1.6.0-update23
Oracle JRE=1.6.0-update24
Oracle JRE=1.6.0-update25
Oracle JRE=1.6.0-update26
Oracle JRE=1.6.0-update27
Oracle JRE=1.6.0-update29
Oracle JRE=1.6.0-update3
Oracle JRE=1.6.0-update30
Oracle JRE=1.6.0-update31
Oracle JRE=1.6.0-update32
Oracle JRE=1.6.0-update4
Oracle JRE=1.6.0-update5
Oracle JRE=1.6.0-update6
Oracle JRE=1.6.0-update7
Oracle JRE=1.6.0-update8
Oracle JRE=1.6.0-update9
Oracle JRE=1.7.0
Oracle JRE=1.7.0-update1
Oracle JRE=1.7.0-update2
Oracle JRE=1.7.0-update3
Oracle JRE=1.7.0-update4
Linux Linux kernel
Sun SunOS
Oracle JDK>=1.4.2<=1.4.2_37
Oracle JDK=1.5.0
Oracle JDK=1.5.0-update1
Oracle JDK=1.5.0-update10
Oracle JDK=1.5.0-update11
Oracle JDK=1.5.0-update12
Oracle JDK=1.5.0-update13
Oracle JDK=1.5.0-update14
Oracle JDK=1.5.0-update15
Oracle JDK=1.5.0-update16
Oracle JDK=1.5.0-update17
Oracle JDK=1.5.0-update18
Oracle JDK=1.5.0-update19
Oracle JDK=1.5.0-update2
Oracle JDK=1.5.0-update20
Oracle JDK=1.5.0-update21
Oracle JDK=1.5.0-update22
Oracle JDK=1.5.0-update23
Oracle JDK=1.5.0-update24
Oracle JDK=1.5.0-update25
Oracle JDK=1.5.0-update26
Oracle JDK=1.5.0-update27
Oracle JDK=1.5.0-update28
Oracle JDK=1.5.0-update29
Oracle JDK=1.5.0-update3
Oracle JDK=1.5.0-update30
Oracle JDK=1.5.0-update31
Oracle JDK=1.5.0-update32
Oracle JDK=1.5.0-update33
Oracle JDK=1.5.0-update34
Oracle JDK=1.5.0-update35
Oracle JDK=1.5.0-update4
Oracle JDK=1.5.0-update5
Oracle JDK=1.5.0-update6
Oracle JDK=1.5.0-update7
Oracle JDK=1.5.0-update8
Oracle JDK=1.5.0-update9
Oracle JDK=1.6.0
Oracle JDK=1.6.0-update1
Oracle JDK=1.6.0-update10
Oracle JDK=1.6.0-update11
Oracle JDK=1.6.0-update12
Oracle JDK=1.6.0-update13
Oracle JDK=1.6.0-update14
Oracle JDK=1.6.0-update15
Oracle JDK=1.6.0-update16
Oracle JDK=1.6.0-update17
Oracle JDK=1.6.0-update18
Oracle JDK=1.6.0-update19
Oracle JDK=1.6.0-update2
Oracle JDK=1.6.0-update20
Oracle JDK=1.6.0-update21
Oracle JDK=1.6.0-update22
Oracle JDK=1.6.0-update23
Oracle JDK=1.6.0-update24
Oracle JDK=1.6.0-update25
Oracle JDK=1.6.0-update26
Oracle JDK=1.6.0-update27
Oracle JDK=1.6.0-update29
Oracle JDK=1.6.0-update3
Oracle JDK=1.6.0-update30
Oracle JDK=1.6.0-update31
Oracle JDK=1.6.0-update32
Oracle JDK=1.6.0-update4
Oracle JDK=1.6.0-update5
Oracle JDK=1.6.0-update6
Oracle JDK=1.6.0-update7
Oracle JDK=1.6.0-update8
Oracle JDK=1.6.0-update9
Oracle JDK=1.7.0
Oracle JDK=1.7.0-update1
Oracle JDK=1.7.0-update2
Oracle JDK=1.7.0-update3
Oracle JDK=1.7.0-update4
redhat Icedtea6<1.10.8
redhat Icedtea6>=1.11.0<1.11.3
redhat Satellite With Embedded Oracle=5.5
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.2
redhat Enterprise Linux For Ibm Z Systems=5.0
redhat Enterprise Linux For Power Big Endian=5.0
redhat Enterprise Linux For Scientific Computing=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server Aus=6.2
redhat Enterprise Linux Server From Rhui=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
SUSE Linux Enterprise Desktop=10-sp4
SUSE Linux Enterprise Java=10-sp4
SUSE Linux Enterprise Java=11-sp2
SUSE Linux Enterprise Server=10-sp4
SUSE Linux Enterprise Server=11-sp2
SUSE Linux Enterprise Server Vmware=11-sp2
SUSE Linux Enterprise Software Development Kit=11-sp2
Remediation
Event History
Jun 16, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1717?
The severity of CVE-2012-1717 is high due to its potential impact on confidentiality for local users.
2
How do I fix CVE-2012-1717?
To fix CVE-2012-1717, upgrade your Java Runtime Environment to a version beyond JRE 7 update 4, JRE 6 update 32, or JRE 5 update 35.
3
Who is affected by CVE-2012-1717?
Local users running affected versions of Oracle Java SE on Solaris or Linux systems are impacted by CVE-2012-1717.
4
What is the nature of CVE-2012-1717?
CVE-2012-1717 is an unspecified vulnerability in the Java Runtime Environment that could allow exploitation through printing operations.
5
When was CVE-2012-1717 disclosed?
CVE-2012-1717 was disclosed in May 2012 as part of various security updates from Oracle.