CVE-2012-0503

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 86.46%
Affected Products (NVD)
VendorProductVersion
sunjre
𝑥
≤ 1.4.2_35
sunjre
1.4.2
sunjre
1.4.2_1
sunjre
1.4.2_2
sunjre
1.4.2_3
sunjre
1.4.2_4
sunjre
1.4.2_5
sunjre
1.4.2_6
sunjre
1.4.2_7
sunjre
1.4.2_8
sunjre
1.4.2_9
sunjre
1.4.2_10
sunjre
1.4.2_11
sunjre
1.4.2_12
sunjre
1.4.2_13
sunjre
1.4.2_14
sunjre
1.4.2_15
sunjre
1.4.2_16
sunjre
1.4.2_17
sunjre
1.4.2_18
sunjre
1.4.2_19
sunjre
1.4.2_20
sunjre
1.4.2_21
sunjre
1.4.2_22
sunjre
1.4.2_23
sunjre
1.4.2_24
sunjre
1.4.2_25
sunjre
1.4.2_26
sunjre
1.4.2_27
sunjre
1.4.2_28
sunjre
1.4.2_29
sunjre
1.4.2_30
sunjre
1.4.2_31
sunjre
1.4.2_32
sunjre
1.4.2_33
sunjre
1.4.2_34
sunjre
𝑥
≤ 1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
sunjre
1.5.0
oraclejre
𝑥
≤ 1.6.0
oraclejre
1.6.0
oraclejre
1.6.0
oraclejre
1.6.0
oraclejre
1.6.0
oraclejre
1.6.0
oraclejre
1.6.0
oraclejre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
sunjre
1.6.0
oraclejre
𝑥
≤ 1.7.0
oraclejre
1.7.0
oraclejre
1.7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
icedtea-web
hardy
dne
lucid
not-affected
maverick
dne
natty
not-affected
oneiric
not-affected
precise
not-affected
quantal
not-affected
openjdk-6
hardy
Fixed 6b27-1.12.3-0ubuntu1~08.04.1
released
lucid
Fixed 6b20-1.9.13-0ubuntu1~10.04.1
released
maverick
Fixed 6b20-1.9.13-0ubuntu1~10.10.1
released
natty
Fixed 6b22-1.10.6-0ubuntu1
released
oneiric
Fixed 6b23~pre11-0ubuntu1.11.10.2
released
precise
not-affected
quantal
not-affected
openjdk-6b18
hardy
dne
lucid
Fixed 6b18-1.8.13-0ubuntu1~10.04.1
released
maverick
Fixed 6b18-1.8.13-0ubuntu1~10.10.1
released
natty
Fixed 6b18-1.8.13-0ubuntu1~11.04.1
released
oneiric
ignored
precise
dne
quantal
dne
openjdk-7
hardy
dne
lucid
dne
maverick
dne
natty
dne
oneiric
Fixed 7u9-2.3.3-0ubuntu1~11.10.1
released
precise
not-affected
quantal
not-affected
sun-java5
hardy
ignored
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
sun-java6
hardy
ignored
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
java-1_7_0-openjdk
suse enterprise sap 12 SP5
1.7.0.231-43.27.2
fixed
suse enterprise server 12
1.7.0.6-33.3
fixed
suse enterprise server 12 SP1
1.7.0.91-21.2
fixed
suse enterprise server 12 SP2
1.7.0.111-33.1
fixed
suse enterprise server 12 SP3
1.7.0.141-42.1
fixed
suse enterprise server 12 SP4
1.7.0.181-43.15.2
fixed
suse enterprise server 12 SP5
1.7.0.231-43.27.2
fixed
java-1_7_0-openjdk-demo
suse enterprise sap 12 SP5
1.7.0.231-43.27.2
fixed
suse enterprise server 12
1.7.0.6-33.3
fixed
suse enterprise server 12 SP1
1.7.0.91-21.2
fixed
suse enterprise server 12 SP2
1.7.0.111-33.1
fixed
suse enterprise server 12 SP3
1.7.0.141-42.1
fixed
suse enterprise server 12 SP4
1.7.0.181-43.15.2
fixed
suse enterprise server 12 SP5
1.7.0.231-43.27.2
fixed
java-1_7_0-openjdk-devel
suse enterprise sap 12 SP5
1.7.0.231-43.27.2
fixed
suse enterprise server 12
1.7.0.6-33.3
fixed
suse enterprise server 12 SP1
1.7.0.91-21.2
fixed
suse enterprise server 12 SP2
1.7.0.111-33.1
fixed
suse enterprise server 12 SP3
1.7.0.141-42.1
fixed
suse enterprise server 12 SP4
1.7.0.181-43.15.2
fixed
suse enterprise server 12 SP5
1.7.0.231-43.27.2
fixed
java-1_7_0-openjdk-headless
suse enterprise sap 12 SP5
1.7.0.231-43.27.2
fixed
suse enterprise server 12
1.7.0.6-33.3
fixed
suse enterprise server 12 SP1
1.7.0.91-21.2
fixed
suse enterprise server 12 SP2
1.7.0.111-33.1
fixed
suse enterprise server 12 SP3
1.7.0.141-42.1
fixed
suse enterprise server 12 SP4
1.7.0.181-43.15.2
fixed
suse enterprise server 12 SP5
1.7.0.231-43.27.2
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
java-1.5.0-ibm
RHEL 6
1:1.5.0.13.1-1jpp.2.el6_2
fixed
java-1.5.0-ibm-demo
RHEL 6
1:1.5.0.13.1-1jpp.2.el6_2
fixed
java-1.5.0-ibm-devel
RHEL 6
1:1.5.0.13.1-1jpp.2.el6_2
fixed
java-1.5.0-ibm-javacomm
RHEL 6
1:1.5.0.13.1-1jpp.2.el6_2
fixed
java-1.5.0-ibm-jdbc
RHEL 6
1:1.5.0.13.1-1jpp.2.el6_2
fixed
java-1.5.0-ibm-plugin
RHEL 6
1:1.5.0.13.1-1jpp.2.el6_2
fixed
java-1.5.0-ibm-src
RHEL 6
1:1.5.0.13.1-1jpp.2.el6_2
fixed
java-1.6.0-ibm
RHEL 6
1:1.6.0.10.1-1jpp.5.el6_2
fixed
java-1.6.0-ibm-demo
RHEL 6
1:1.6.0.10.1-1jpp.5.el6_2
fixed
java-1.6.0-ibm-devel
RHEL 6
1:1.6.0.10.1-1jpp.5.el6_2
fixed
java-1.6.0-ibm-javacomm
RHEL 6
1:1.6.0.10.1-1jpp.5.el6_2
fixed
java-1.6.0-ibm-jdbc
RHEL 6
1:1.6.0.10.1-1jpp.5.el6_2
fixed
java-1.6.0-ibm-plugin
RHEL 6
1:1.6.0.10.1-1jpp.5.el6_2
fixed
java-1.6.0-ibm-src
RHEL 6
1:1.6.0.10.1-1jpp.5.el6_2
fixed
java-1.6.0-openjdk
RHEL 6
1:1.6.0.0-1.43.1.10.6.el6_2
fixed
java-1.6.0-openjdk-demo
RHEL 6
1:1.6.0.0-1.43.1.10.6.el6_2
fixed
java-1.6.0-openjdk-devel
RHEL 6
1:1.6.0.0-1.43.1.10.6.el6_2
fixed
java-1.6.0-openjdk-javadoc
RHEL 6
1:1.6.0.0-1.43.1.10.6.el6_2
fixed
java-1.6.0-openjdk-src
RHEL 6
1:1.6.0.0-1.43.1.10.6.el6_2
fixed
java-1.6.0-sun
RHEL 6
1:1.6.0.31-1jpp.1.el6_2
fixed
java-1.6.0-sun-demo
RHEL 6
1:1.6.0.31-1jpp.1.el6_2
fixed
java-1.6.0-sun-devel
RHEL 6
1:1.6.0.31-1jpp.1.el6_2
fixed
java-1.6.0-sun-jdbc
RHEL 6
1:1.6.0.31-1jpp.1.el6_2
fixed
java-1.6.0-sun-plugin
RHEL 6
1:1.6.0.31-1jpp.1.el6_2
fixed
java-1.6.0-sun-src
RHEL 6
1:1.6.0.31-1jpp.1.el6_2
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
java-1.6.0-openjdk
Amazon Linux 1
1:1.6.0.0-52.1.10.6.41.amzn1
fixed
java-1.6.0-openjdk-debuginfo
Amazon Linux 1
1:1.6.0.0-52.1.10.6.41.amzn1
fixed
java-1.6.0-openjdk-demo
Amazon Linux 1
1:1.6.0.0-52.1.10.6.41.amzn1
fixed
java-1.6.0-openjdk-devel
Amazon Linux 1
1:1.6.0.0-52.1.10.6.41.amzn1
fixed
java-1.6.0-openjdk-javadoc
Amazon Linux 1
1:1.6.0.0-52.1.10.6.41.amzn1
fixed
java-1.6.0-openjdk-src
Amazon Linux 1
1:1.6.0.0-52.1.10.6.41.amzn1
fixed
References
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00015.html
http://marc.info/?l=bugtraq&m=133364885411663&w=2
http://marc.info/?l=bugtraq&m=133365109612558&w=2
http://marc.info/?l=bugtraq&m=133728004526190&w=2
http://marc.info/?l=bugtraq&m=133847939902305&w=2
http://marc.info/?l=bugtraq&m=134254866602253&w=2
http://marc.info/?l=bugtraq&m=134254957702612&w=2
http://rhn.redhat.com/errata/RHSA-2012-0508.html
http://rhn.redhat.com/errata/RHSA-2012-0514.html
http://rhn.redhat.com/errata/RHSA-2012-0702.html
http://rhn.redhat.com/errata/RHSA-2012-1080.html
http://rhn.redhat.com/errata/RHSA-2013-1455.html
http://secunia.com/advisories/48073
http://secunia.com/advisories/48074
http://secunia.com/advisories/48589
http://secunia.com/advisories/48692
http://secunia.com/advisories/48915
http://secunia.com/advisories/48948
http://secunia.com/advisories/48950
http://secunia.com/advisories/49198
http://security.gentoo.org/glsa/glsa-201406-32.xml
http://www.debian.org/security/2012/dsa-2420
http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
http://www.securityfocus.com/bid/52018
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14813
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00015.html
http://marc.info/?l=bugtraq&m=133364885411663&w=2
http://marc.info/?l=bugtraq&m=133365109612558&w=2
http://marc.info/?l=bugtraq&m=133728004526190&w=2
http://marc.info/?l=bugtraq&m=133847939902305&w=2
http://marc.info/?l=bugtraq&m=134254866602253&w=2
http://marc.info/?l=bugtraq&m=134254957702612&w=2
http://rhn.redhat.com/errata/RHSA-2012-0508.html
http://rhn.redhat.com/errata/RHSA-2012-0514.html
http://rhn.redhat.com/errata/RHSA-2012-0702.html
http://rhn.redhat.com/errata/RHSA-2012-1080.html
http://rhn.redhat.com/errata/RHSA-2013-1455.html
http://secunia.com/advisories/48073
http://secunia.com/advisories/48074
http://secunia.com/advisories/48589
http://secunia.com/advisories/48692
http://secunia.com/advisories/48915
http://secunia.com/advisories/48948
http://secunia.com/advisories/48950
http://secunia.com/advisories/49198
http://security.gentoo.org/glsa/glsa-201406-32.xml
http://www.debian.org/security/2012/dsa-2420
http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
http://www.securityfocus.com/bid/52018
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14813