NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2012-1723

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Affected products

VendorProductAffected versions
OracleJdk
through 1.4.2_37
Versions 1.5.0, 1.6.0, 1.7.0
OracleJre
through 1.4.2_37
Versions 1.5.0, 1.6.0, 1.7.0
RedhatIcedtea6
before 1.10.8
from 1.11.0 before 1.11.3
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.2
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 6.2
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0

Weakness classification

CWE-284

References