CVE-2012-5086: Critical severity oracle java se 7 vulnerability

Q: What is the severity of CVE-2012-5086?

CVE-2012-5086 is considered a high-severity vulnerability affecting the Java Runtime Environment.

Q: How do I fix CVE-2012-5086?

To address CVE-2012-5086, it is recommended to update to the latest version of the Oracle Java SE or JRE.

Q: Which versions are affected by CVE-2012-5086?

CVE-2012-5086 affects Oracle Java SE 7 Update 7 and earlier, and Oracle JRE 6 Update 35 and earlier.

Q: What impact does CVE-2012-5086 have on systems?

CVE-2012-5086 may compromise the confidentiality, integrity, and availability of affected systems.

Q: Is CVE-2012-5086 being actively exploited?

CVE-2012-5086 has been noted for exploitation in the wild, highlighting the urgency of applying patches.

Published Oct 16, 2012

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

Affected Software

82 affected components

Oracle JDK<=1.7.0

Oracle JDK=1.7.0

Oracle JDK=1.7.0-update1

Oracle JDK=1.7.0-update2

Oracle JDK=1.7.0-update3

Oracle JDK=1.7.0-update4

Oracle JDK=1.7.0-update5

Oracle JDK=1.7.0-update6

ORACLE JRE<=1.7.0

ORACLE JRE=1.7.0

ORACLE JRE=1.7.0-update1

ORACLE JRE=1.7.0-update2

ORACLE JRE=1.7.0-update3

ORACLE JRE=1.7.0-update4

ORACLE JRE=1.7.0-update5

ORACLE JRE=1.7.0-update6

Oracle JDK<=1.6.0

Oracle JDK=1.6.0-update22

Oracle JDK=1.6.0-update23

Oracle JDK=1.6.0-update24

Oracle JDK=1.6.0-update25

Oracle JDK=1.6.0-update26

Oracle JDK=1.6.0-update27

Oracle JDK=1.6.0-update29

Oracle JDK=1.6.0-update30

Oracle JDK=1.6.0-update31

Oracle JDK=1.6.0-update32

Oracle JDK=1.6.0-update33

Oracle JDK=1.6.0-update34

ORACLE JRE<=1.6.0

ORACLE JRE=1.6.0-update22

ORACLE JRE=1.6.0-update23

ORACLE JRE=1.6.0-update24

ORACLE JRE=1.6.0-update25

ORACLE JRE=1.6.0-update26

ORACLE JRE=1.6.0-update27

ORACLE JRE=1.6.0-update29

ORACLE JRE=1.6.0-update30

ORACLE JRE=1.6.0-update31

ORACLE JRE=1.6.0-update32

ORACLE JRE=1.6.0-update33

ORACLE JRE=1.6.0-update34

Sun JDK=1.6.0-update_10

Sun JDK=1.6.0-update_11

Sun JDK=1.6.0-update_12

Sun JDK=1.6.0-update_13

Sun JDK=1.6.0-update_14

Sun JDK=1.6.0-update_15

Sun JDK=1.6.0-update_16

Sun JDK=1.6.0-update_17

Sun JDK=1.6.0-update_18

Sun JDK=1.6.0-update_19

Sun JDK=1.6.0-update_3

Sun JDK=1.6.0-update_4

Sun JDK=1.6.0-update_5

Sun JDK=1.6.0-update_6

Sun JDK=1.6.0-update_7

Sun JDK=1.6.0-update1

Sun JDK=1.6.0-update1_b06

Sun JDK=1.6.0-update2

Sun JDK=1.6.0.200-update20

Sun JDK=1.6.0.210-update21

Sun JRE=1.6.0

Sun JRE=1.6.0-update_1

Sun JRE=1.6.0-update_10

Sun JRE=1.6.0-update_11

Sun JRE=1.6.0-update_12

Sun JRE=1.6.0-update_13

Sun JRE=1.6.0-update_14

Sun JRE=1.6.0-update_15

Sun JRE=1.6.0-update_16

Sun JRE=1.6.0-update_17

Sun JRE=1.6.0-update_18

Sun JRE=1.6.0-update_19

Sun JRE=1.6.0-update_2

Sun JRE=1.6.0-update_20

Sun JRE=1.6.0-update_21

Sun JRE=1.6.0-update_3

Sun JRE=1.6.0-update_4

Sun JRE=1.6.0-update_5

Sun JRE=1.6.0-update_6

Sun JRE=1.6.0-update_7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html

Event History

Oct 16, 2012

CVE Published

via MITRE·09:29 PM

Data Sourced

via MITRE·09:29 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-5086?

CVE-2012-5086 is considered a high-severity vulnerability affecting the Java Runtime Environment.

How do I fix CVE-2012-5086?

To address CVE-2012-5086, it is recommended to update to the latest version of the Oracle Java SE or JRE.

Which versions are affected by CVE-2012-5086?