CVE-2012-5076
CRITICAL KEV RANSOMWAREJava Applet AverageRangeStatisticImpl Remote Code Execution
Title source: metasploitExploitation Summary
CVE-2012-5076 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 28, 2022, with confirmed use in ransomware campaigns.
EIP tracks 4 public exploits from researchers including Metasploit, Unknown, juan vazquez, including a Metasploit module exploits/multi/browser/java_jre17_jaxws.
AI-analyzed exploit summary This Metasploit module exploits CVE-2012-5076, a vulnerability in Java 7u7 and earlier, by abusing the AverageRangeStatisticImpl class to execute arbitrary Java code outside the sandbox. It delivers a malicious JAR file via an HTML page with an embedded applet.
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.
Exploits (4)
This Metasploit module exploits CVE-2012-5076, a vulnerability in Java 7u7 and earlier, by abusing the AverageRangeStatisticImpl class to execute arbitrary Java code outside the sandbox. It delivers a malicious JAR file via an HTML page with an embedded applet.
This Metasploit module exploits CVE-2012-5076, a vulnerability in Java JAX-WS classes that allows remote code execution outside the sandbox. It delivers a malicious JAR file via an HTML page with an embedded applet, targeting Java 7u7 and earlier.
This Metasploit module exploits CVE-2012-5076 in Java JAX-WS to achieve remote code execution via a malicious Java applet. It delivers a JAR file containing exploit classes to bypass sandbox restrictions in Java 7u7 and earlier.
This Metasploit module exploits CVE-2012-5076 by abusing the AverageRangeStatisticImpl class in Java Applets to execute arbitrary code outside the sandbox. It targets Java 7u7 and earlier versions.
References (11)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H