CVE-2012-1682

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136.  NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
oracleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
oraclejdk
𝑥
≤ 1.7.0
oraclejdk
1.7.0
oraclejdk
1.7.0
oraclejdk
1.7.0
oraclejdk
1.7.0
oraclejdk
1.7.0
oraclejdk
1.7.0
oraclejre
𝑥
≤ 1.7.0
oraclejre
1.7.0
oraclejre
1.7.0
oraclejre
1.7.0
oraclejre
1.7.0
oraclejre
1.7.0
oraclejre
1.7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
icedtea-web
quantal
not-affected
precise
not-affected
oneiric
not-affected
natty
not-affected
lucid
not-affected
hardy
dne
openjdk-6
quantal
not-affected
precise
Fixed 6b24-1.11.4-1ubuntu0.12.04.1
released
oneiric
Fixed 6b24-1.11.4-1ubuntu0.11.10.1
released
natty
Fixed 6b24-1.11.4-1ubuntu0.11.04.1
released
lucid
Fixed 6b24-1.11.4-1ubuntu0.10.04.1
released
hardy
Fixed 6b27-1.12.3-0ubuntu1~08.04.1
released
openjdk-6b18
quantal
dne
precise
dne
oneiric
not-affected
natty
ignored
lucid
ignored
hardy
dne
openjdk-7
quantal
not-affected
precise
not-affected
oneiric
Fixed 7u9-2.3.3-0ubuntu1~11.10.1
released
natty
dne
lucid
dne
hardy
dne
sun-java5
quantal
dne
precise
dne
oneiric
dne
natty
dne
lucid
dne
hardy
ignored
sun-java6
quantal
dne
precise
dne
oneiric
dne
natty
dne
lucid
dne
hardy
ignored
References