CVE-2012-3159: High severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2012-3159?

CVE-2012-3159 is classified as a high-severity vulnerability that can affect confidentiality, integrity, and availability.

Q: How do I fix CVE-2012-3159?

To fix CVE-2012-3159, upgrade to the latest version of the Oracle Java SE 7 or Oracle JRE 6 that addresses this vulnerability.

Q: What versions are affected by CVE-2012-3159?

CVE-2012-3159 affects Oracle Java SE 7 Update 7 and earlier, as well as Oracle JRE 6 Update 35 and earlier.

Q: What types of attacks does CVE-2012-3159 allow?

CVE-2012-3159 allows remote attackers to exploit the vulnerability potentially leading to unauthorized actions affecting system security.

Q: What is the primary component involved in CVE-2012-3159?

The primary component involved in CVE-2012-3159 is the Java Runtime Environment (JRE), specifically its Deployment functionality.

Published Oct 16, 2012

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1533.

Affected Software

82 affected components

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

Oracle JDK<=1.6.0

Oracle JDK=1.6.0-update22

Oracle JDK=1.6.0-update23

Oracle JDK=1.6.0-update24

Oracle JDK=1.6.0-update25

Oracle JDK=1.6.0-update26

Oracle JDK=1.6.0-update27

Oracle JDK=1.6.0-update29

Oracle JDK=1.6.0-update30

Oracle JDK=1.6.0-update31

Oracle JDK=1.6.0-update32

Oracle JDK=1.6.0-update33

Oracle JDK=1.6.0-update34

ORACLE JRE<=1.6.0

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

ORACLE JRE=1.6.0-update30

ORACLE JRE=1.6.0-update31

ORACLE JRE=1.6.0-update32

ORACLE JRE=1.6.0-update33

ORACLE JRE=1.6.0-update34

Sun JDK=1.6.0-update_10

Sun JDK=1.6.0-update_11

Sun JDK=1.6.0-update_12

Sun JDK=1.6.0-update_13

Sun JDK=1.6.0-update_14

Sun JDK=1.6.0-update_15

Sun JDK=1.6.0-update_16

Sun JDK=1.6.0-update_17

Sun JDK=1.6.0-update_18

Sun JDK=1.6.0-update_19

Sun JDK=1.6.0-update_3

Sun JDK=1.6.0-update_4

Sun JDK=1.6.0-update_5

Sun JDK=1.6.0-update_6

Sun JDK=1.6.0-update_7

Sun JDK=1.6.0-update1

Sun JDK=1.6.0-update1_b06

Sun JDK=1.6.0-update2

Sun JDK=1.6.0.200-update20

Sun JDK=1.6.0.210-update21

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html

Event History

Oct 16, 2012

CVE Published

via MITRE·09:29 PM

Data Sourced

via MITRE·09:29 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3159?

CVE-2012-3159 is classified as a high-severity vulnerability that can affect confidentiality, integrity, and availability.

How do I fix CVE-2012-3159?

To fix CVE-2012-3159, upgrade to the latest version of the Oracle Java SE 7 or Oracle JRE 6 that addresses this vulnerability.

What versions are affected by CVE-2012-3159?