CVE-2012-3174: Critical severity oracle java se 7 vulnerability

Published Jan 14, 2013

Updated

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114.

Affected Software

20 affected components

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update10

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

Oracle JDK=1.7.0-update7

Oracle JDK=1.7.0-update9

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update10

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

ORACLE JRE=1.7.0-update7

ORACLE JRE=1.7.0-update9

Event History

Jan 14, 2013

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3174?

CVE-2012-3174 has a critical severity rating due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2012-3174?

To mitigate CVE-2012-3174, upgrade your Oracle Java 7 to the latest version beyond Update 11.

What software is affected by CVE-2012-3174?

CVE-2012-3174 affects Oracle Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 1.7.0 through 1.7.0 Update 10.

Can CVE-2012-3174 lead to remote attacks?

Yes, CVE-2012-3174 allows remote attackers to exploit the vulnerability under certain conditions.

Is CVE-2012-3174 the same as CVE-2013-0422?

No, CVE-2012-3174 is a different vulnerability from CVE-2013-0422, both of which pertain to Oracle Java.