CVE-2012-1716

Oracle Java SE <7u4, <6u32, <5u35 - Info Disclosure

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.

References (15)

Core 15
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16168
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:095
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21615246
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201406-32.xml
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0734.html
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=134496371727681&w=2
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1455.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53947
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1456.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51080

Scores

EPSS 0.0484
EPSS Percentile 89.6%

Details

Status published
Products (9)
oracle/jdk 1.7.0 (4 CPE variants)
oracle/jdk 1.6.0 update22 (9 CPE variants)
oracle/jdk < 1.6.0
oracle/jdk < 1.7.0
oracle/jre 1.7.0 (4 CPE variants)
oracle/jre 1.6.0 update22 (9 CPE variants)
oracle/jre < 1.6.0
oracle/jre < 1.7.0
sun/jdk 1.6.0 (20 CPE variants)
Published Jun 16, 2012
Tracked Since Feb 18, 2026