5
CVSSv2

CVE-2012-5081

Published: 16/10/2012 Updated: 13/05/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and previous versions, 6 Update 35 and previous versions, 5.0 Update 36 and previous versions, and 1.4.2_38 and previous versions allows remote malicious users to affect availability, related to JSSE.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle jdk

oracle jdk 1.7.0

oracle jre 1.7.0

oracle jre

sun jdk 1.6.0

sun jre 1.6.0

sun jdk 1.6.0.200

oracle jre 1.6.0

oracle jdk 1.6.0

sun jdk 1.6.0.210

sun jre 1.5.0

sun jdk 1.5.0

sun jre 1.4.2_26

sun jdk 1.4.2_13

sun jdk 1.4.2_30

sun jre 1.4.2_7

sun jre 1.4.2_27

sun jdk 1.4.2_12

sun jdk 1.4.2_31

sun jre 1.4.2_16

sun jdk 1.4.2_3

sun jre 1.4.2_24

sun jre 1.4.2_15

sun jre 1.4.2_31

sun jdk 1.4.2_18

sun jdk 1.4.2_29

sun jre 1.4.2_2

sun jre 1.4.2_19

sun jdk 1.4.2_6

sun jdk 1.4.2_23

sun jdk 1.4.2_32

sun jre 1.4.2_4

sun jre 1.4.2_13

sun jre 1.4.2_29

sun jdk 1.4.2_8

sun jdk 1.4.2_16

sun jdk 1.4.2_26

sun jre 1.4.2_1

sun jre 1.4.2_8

sun jre 1.4.2_25

sun jdk 1.4.2_19

sun jre 1.4.2_14

sun jre 1.4.2_23

sun jre 1.4.2_32

sun jdk 1.4.2

sun jdk 1.4.2_1

sun jdk 1.4.2_9

sun jdk 1.4.2_10

sun jdk 1.4.2_17

sun jdk 1.4.2_28

sun jdk 1.4.2_37

sun jre 1.4.2_3

sun jre 1.4.2_10

sun jre 1.4.2_11

sun jre 1.4.2_18

sun jre 1.4.2_28

sun jre 1.4.2_35

sun jre 1.4.2_36

sun jdk 1.4.2_4

sun jdk 1.4.2_5

sun jdk 1.4.2_14

sun jdk 1.4.2_25

sun jdk 1.4.2_33

sun jdk 1.4.2_34

sun jre 1.4.2_12

sun jre 1.4.2_20

sun jre 1.4.2_21

sun jre 1.4.2_22

sun jre 1.4.2_30

sun jre 1.4.2_37

sun jdk 1.4.2_7

sun jdk 1.4.2_27

sun jdk 1.4.2_35

sun jdk 1.4.2_36

sun jre 1.4.2_9

sun jre 1.4.2_17

sun jre 1.4.2_33

sun jdk 1.4.2_2

sun jdk 1.4.2_11

sun jdk 1.4.2_22

sun jre 1.4.2_6

sun jre 1.4.2_5

sun jdk 1.4.2_15

sun jre 1.4.2_34

Vendor Advisories

Several security issues were fixed in OpenJDK ...
Synopsis Critical: java-160-openjdk security update Type/Severity Security Advisory: Critical Topic Updated java-160-openjdk packages that fix several security issues arenow available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having criticalsecurity impac ...
Synopsis Critical: java-160-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalse ...
Synopsis Critical: java-142-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-142-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 Supplementary This is the lastupdate of these packages for Red Hat Enterprise Linux 5 Supplement ...
Synopsis Critical: java-170-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-170-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalsecurity ...
Synopsis Critical: java-160-sun security update Type/Severity Security Advisory: Critical Topic Updated java-160-sun packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalse ...
Synopsis Important: java-160-openjdk security update Type/Severity Security Advisory: Important Topic Updated java-160-openjdk packages that fix several security issues arenow available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security im ...
Synopsis Low: Red Hat Network Satellite server IBM Java Runtime security update Type/Severity Security Advisory: Low Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Network Satellite Server 55The Red Hat Security Response Team has rated this update as ha ...
Synopsis Critical: java-170-oracle security update Type/Severity Security Advisory: Critical Topic Updated java-170-oracle packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalse ...
Synopsis Important: java-170-openjdk security update Type/Severity Security Advisory: Important Topic Updated java-170-openjdk packages that fix several security issues arenow available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as havingimportant security im ...
Synopsis Low: Red Hat Network Satellite server IBM Java Runtime security update Type/Severity Security Advisory: Low Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Network Satellite Server 54The Red Hat Security Response Team has rated this update as ha ...
Synopsis Critical: java-150-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-150-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalse ...
Multiple improper permission check issues were discovered in the Beans, Swing, and JMX components in OpenJDK An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2012-5086, CVE-2012-5084, CVE-2012-5089) Multiple improper permission check issues were discovered in the Scripting, JMX, Concurrency, L ...
Multiple improper permission check issues were discovered in the Beans, Swing, and JMX components in OpenJDK An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2012-5086, CVE-2012-5084, CVE-2012-5089) Multiple improper permission check issues were discovered in the Scripting, JMX, Concurrency, L ...

Github Repositories

A set of tools and instructions to check if a library is vulnerable to the Marvin attack

marvin-toolkit A set of tools and instructions to check if a library is vulnerable to the Marvin attack Marvin attack is a continuation of work published by Hanno Böck, Juraj Somorovsky, and Craig Young in their ROBOT Attack[1] The main page about the attack is at peopleredhatcom/~hkario/marvin/ Version: 033 Primary contact: Hubert Kario (hkario@redhatcom) T

References

NVD-CWE-noinfohttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1391.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1385.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1386.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1392.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-11/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.htmlhttp://marc.info/?l=bugtraq&m=135542848327757&w=2http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1467.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1465.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1466.htmlhttp://marc.info/?l=bugtraq&m=135758563611658&w=2http://secunia.com/advisories/51029http://secunia.com/advisories/51028http://www-01.ibm.com/support/docview.wss?uid=swg21620037http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdfhttp://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.htmlhttp://www-01.ibm.com/support/docview.wss?uid=swg21631786http://www-01.ibm.com/support/docview.wss?uid=swg21620575http://secunia.com/advisories/51141http://secunia.com/advisories/51438http://secunia.com/advisories/51328http://secunia.com/advisories/51326http://secunia.com/advisories/51393http://secunia.com/advisories/51390http://secunia.com/advisories/51315http://secunia.com/advisories/51313http://secunia.com/advisories/51327http://secunia.com/advisories/51166http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://rhn.redhat.com/errata/RHSA-2013-1455.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1456.htmlhttp://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://www.securityfocus.com/bid/56071https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16043http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlhttps://usn.ubuntu.com/1619-1/https://nvd.nist.govhttps://www.kb.cert.org/vuls/id/144389