CVE-2012-4420: Infoleak
An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation (in certain circumstances they had nonzero elements right after the allocation). A remote attacker could use this flaw to obtain potentially sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4420?
CVE-2012-4420 is classified as a medium-severity vulnerability due to its potential for information disclosure.
What types of software are affected by CVE-2012-4420?
CVE-2012-4420 primarily affects the Oracle JDK version 7.0.
How can I mitigate the risk of CVE-2012-4420?
To mitigate CVE-2012-4420, it is recommended to upgrade to a later version of Java that addresses this vulnerability.
What kind of attack can exploit CVE-2012-4420?
CVE-2012-4420 can be exploited by remote attackers to gain unauthorized access to sensitive information.
How does CVE-2012-4420 create an information disclosure risk?
CVE-2012-4420 creates an information disclosure risk by improperly initializing integer arrays in the Java Virtual Machine, potentially exposing sensitive data.