Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-0507

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.

Published

2012-06-07T22:55:17.883

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-843
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application sun jre 1.5.0 Yes
Application oracle jre 1.6.0 Yes
Application oracle jre 1.6.0 Yes
Application oracle jre 1.6.0 Yes
Application oracle jre 1.6.0 Yes
Application oracle jre 1.6.0 Yes
Application oracle jre 1.6.0 Yes
Application oracle jre 1.6.0 Yes
Application oracle jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application sun jre 1.6.0 Yes
Application oracle jre 1.7.0 Yes
Application oracle jre 1.7.0 Yes
Application oracle jre 1.7.0 Yes
Operating System debian debian_linux 6.0 Yes
Operating System debian debian_linux 7.0 Yes
Operating System suse linux_enterprise_desktop 10 Yes
Operating System suse linux_enterprise_java 10 Yes
Operating System suse linux_enterprise_java 11 Yes
Operating System suse linux_enterprise_server 10 Yes
Operating System suse linux_enterprise_server 11 Yes
Operating System suse linux_enterprise_server 11 Yes
Operating System suse linux_enterprise_server 11 Yes
Operating System suse linux_enterprise_software_development_kit 11 Yes
Operating System suse linux_enterprise_software_development_kit 11 Yes
References