CVE-2012-3143: Critical severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2012-3143?

CVE-2012-3143 has a moderate severity level due to its potential impact on confidentiality, integrity, and availability.

Q: How do I fix CVE-2012-3143?

To fix CVE-2012-3143, upgrade to the latest version of Oracle JDK or JRE that is not affected by this vulnerability.

Q: Who is affected by CVE-2012-3143?

CVE-2012-3143 affects users of Oracle Java SE 7 Update 7 and earlier, Oracle JDK 6 Update 35 and earlier, and Oracle JRE 6 Update 35 and earlier.

Q: What versions of Java are impacted by CVE-2012-3143?

Versions impacted by CVE-2012-3143 include Oracle Java SE 7 Update 7 and earlier, and several updates of Oracle JDK 6 and JRE 6.

Q: What types of attacks can be related to CVE-2012-3143?

CVE-2012-3143 allows remote attackers to exploit the vulnerability to compromise confidentiality, integrity, and availability of the affected systems.

Published Oct 16, 2012

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-5089.

Affected Software

150 affected components

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

Oracle JDK<=1.6.0

Oracle JDK=1.6.0-update22

Oracle JDK=1.6.0-update23

Oracle JDK=1.6.0-update24

Oracle JDK=1.6.0-update25

Oracle JDK=1.6.0-update26

Oracle JDK=1.6.0-update27

Oracle JDK=1.6.0-update29

Oracle JDK=1.6.0-update30

Oracle JDK=1.6.0-update31

Oracle JDK=1.6.0-update32

Oracle JDK=1.6.0-update33

Oracle JDK=1.6.0-update34

ORACLE JRE<=1.6.0

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

ORACLE JRE=1.6.0-update30

ORACLE JRE=1.6.0-update31

ORACLE JRE=1.6.0-update32

ORACLE JRE=1.6.0-update33

ORACLE JRE=1.6.0-update34

Sun JDK=1.6.0-update_10

Sun JDK=1.6.0-update_11

Sun JDK=1.6.0-update_12

Sun JDK=1.6.0-update_13

Sun JDK=1.6.0-update_14

Sun JDK=1.6.0-update_15

Sun JDK=1.6.0-update_16

Sun JDK=1.6.0-update_17

Sun JDK=1.6.0-update_18

Sun JDK=1.6.0-update_19

Sun JDK=1.6.0-update_3

Sun JDK=1.6.0-update_4

Sun JDK=1.6.0-update_5

Sun JDK=1.6.0-update_6

Sun JDK=1.6.0-update_7

Sun JDK=1.6.0-update1

Sun JDK=1.6.0-update1_b06

Sun JDK=1.6.0-update2

Sun JDK=1.6.0.200-update20

Sun JDK=1.6.0.210-update21

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

Oracle JDK<=1.5.0

ORACLE JRE<=1.5.0

Sun JDK=1.5.0

Sun JDK=1.5.0-update1

Sun JDK=1.5.0-update10

Sun JDK=1.5.0-update11

Sun JDK=1.5.0-update11_b03

Sun JDK=1.5.0-update12

Sun JDK=1.5.0-update13

Sun JDK=1.5.0-update14

Sun JDK=1.5.0-update15

Sun JDK=1.5.0-update16

Sun JDK=1.5.0-update17

Sun JDK=1.5.0-update18

Sun JDK=1.5.0-update19

Sun JDK=1.5.0-update2

Sun JDK=1.5.0-update20

Sun JDK=1.5.0-update21

Sun JDK=1.5.0-update22

Sun JDK=1.5.0-update23

Sun JDK=1.5.0-update24

Sun JDK=1.5.0-update25

Sun JDK=1.5.0-update26

Sun JDK=1.5.0-update27

Sun JDK=1.5.0-update28

Sun JDK=1.5.0-update29

Sun JDK=1.5.0-update3

Sun JDK=1.5.0-update31

Sun JDK=1.5.0-update33

Sun JDK=1.5.0-update4

Sun JDK=1.5.0-update5

Sun JDK=1.5.0-update6

Sun JDK=1.5.0-update7

Sun JDK=1.5.0-update7_b03

Sun JDK=1.5.0-update8

Sun JDK=1.5.0-update9

Sun JRE=1.5.0

Sun JRE=1.5.0-update1

Sun JRE=1.5.0-update10

Sun JRE=1.5.0-update11

Sun JRE=1.5.0-update12

Sun JRE=1.5.0-update13

Sun JRE=1.5.0-update14

Sun JRE=1.5.0-update15

Sun JRE=1.5.0-update16

Sun JRE=1.5.0-update17

Sun JRE=1.5.0-update18

Sun JRE=1.5.0-update19

Sun JRE=1.5.0-update2

Sun JRE=1.5.0-update20

Sun JRE=1.5.0-update21

Sun JRE=1.5.0-update22

Sun JRE=1.5.0-update23

Sun JRE=1.5.0-update24

Sun JRE=1.5.0-update25

Sun JRE=1.5.0-update26

Sun JRE=1.5.0-update27

Sun JRE=1.5.0-update28

Sun JRE=1.5.0-update29

Sun JRE=1.5.0-update3

Sun JRE=1.5.0-update31

Sun JRE=1.5.0-update33

Sun JRE=1.5.0-update4

Sun JRE=1.5.0-update5

Sun JRE=1.5.0-update6

Sun JRE=1.5.0-update7

Sun JRE=1.5.0-update8

Sun JRE=1.5.0-update9

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html

Event History

Oct 16, 2012

CVE Published

via MITRE·09:29 PM

Data Sourced

via MITRE·09:29 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3143?

CVE-2012-3143 has a moderate severity level due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2012-3143?

To fix CVE-2012-3143, upgrade to the latest version of Oracle JDK or JRE that is not affected by this vulnerability.

Who is affected by CVE-2012-3143?