CVE-2012-1533

Oracle Java SE <7.7 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2012-1533. PoCs published by Rh0, including Metasploit module exploits/windows/browser/java_ws_double_quote.

AI-analyzed exploit summary This Metasploit module exploits a flaw in Java Web Start (JNLP) where improper sanitization of double quotes in heap-size parameters allows injection of the -XXaltjvm option, leading to remote code execution via a malicious jvm.dll loaded from a UNC path.

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159.

Exploits (2)

exploitdb WORKING POC
by Rh0 · rubyremotemultiple
https://www.exploit-db.com/exploits/26123

This Metasploit module exploits a flaw in Java Web Start (JNLP) where improper sanitization of double quotes in heap-size parameters allows injection of the -XXaltjvm option, leading to remote code execution via a malicious jvm.dll loaded from a UNC path.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Java Runtime Environment (JRE) <= 1.6.35 and <= 1.7.07
No auth needed
Prerequisites: WebClient service (WebDAV Mini-Redirector) enabled on target · SMB server hosting malicious jvm.dll · Target must visit attacker-controlled HTTP server
devstral-2 · analyzed Feb 18, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_double_quote.rb

This Metasploit module exploits a flaw in Java Web Start (CVE-2012-1533) by injecting a double quote into JNLP parameters, allowing the -XXaltjvm option to load a malicious jvm.dll from a remote UNC path, achieving arbitrary code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Oracle Java Runtime Environment <= 1.6.35 and <= 1.7.07
No auth needed
Prerequisites: WebClient service enabled on target · SMB/UNC path accessibility · Victim must visit attacker-controlled HTTP server
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (22)

Core 22
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1466.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51438
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16648
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=135758563611658&w=2
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21621154
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1455.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1391.html
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21620037
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/79416
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51390
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1392.html
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21616490
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51327
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1467.html
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=135542848327757&w=2
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1456.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/56046
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51326

Scores

EPSS 0.6853
EPSS Percentile 99.2%

Details

Status published
Products (9)
oracle/jdk 1.7.0 (7 CPE variants)
oracle/jdk 1.6.0 update22 (12 CPE variants)
oracle/jdk < 1.6.0
oracle/jdk < 1.7.0
oracle/jre 1.7.0 (7 CPE variants)
oracle/jre 1.6.0 update22 (12 CPE variants)
oracle/jre < 1.6.0
oracle/jre < 1.7.0
sun/jdk 1.6.0 update_10 (8 CPE variants)
Published Oct 16, 2012
Tracked Since Feb 18, 2026