CRITICAL🚩 CISA KEV⚡ EXPLOIT🇬🇧 English

CVE-2012-0507

CVSS 9.8v3.1pub. 2012-06-07upd. 2026-04-22

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Debian
OS
Debian
6.07.0
Oracle Jre
APP
Oracle
1.6.01.7.0
Sun Jre
APP
Sun
1.5.01.6.0
SUSE Linux Enterprise Desktop
OS
Suse
10
SUSE Linux Enterprise Java
OS
Suse
1011
SUSE Linux Enterprise Server
OS
Suse
1011
SUSE Linux Enterprise Software Development Kit
OS
Suse
11

CISA KEV — szczegółyi

Dostawcai: Oracle ↗
Produkti: Java SE
Data dodania do KEVi: 3 marca 2022
Termin remediation (USA)i: 24 marca 2022(po terminie)
Ransomwarei: Aktywne kampanie ransomware używają tej podatności

🔧Advisory Oracle↗🇺🇸CISA KEV (oryginał)↗

Wymagana akcja (CISA)i

Zastosuj aktualizacje zgodnie z instrukcjami producenta.

tłumaczenie AI

▸ Pokaż oryginał (EN)

Apply updates per vendor instructions.

Opis CISAi

Usterka typu integer overflow istnieje w komponencie Concurrency środowiska Oracle Java Runtime Environment, pozwalająca atakującemu na zdalne wykonanie dowolnego kodu.

tłumaczenie AI

▸ Pokaż oryginał (EN)

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

🔴