Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114.

CPENameOperatorVersion
oracle:jreoracle jreeq1.7.0
oracle:jdkoracle jdkeq1.7.0

CPE	Name	Operator	Version
oracle:jre	oracle jre	eq	1.7.0
oracle:jdk	oracle jdk	eq	1.7.0

References

blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/

lists.opensuse.org/opensuse-security-announce/2013-01/msg00025.html

rhn.redhat.com/errata/RHSA-2013-0156.html

rhn.redhat.com/errata/RHSA-2013-0165.html

www.mandriva.com/security/advisories?name=MDVSA-2013:095

www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html

www.ubuntu.com/usn/USN-1693-1

wiki.mageia.org/en/Support/Advisories/MGASA-2013-0018

prion 2

nessus 19

openvas 22

oraclelinux 1

fedora 3

suse 2

ubuntucve 2

seebug 3

redhat 3

cert 1

centos 1

ubuntu 1

zdi 1

cve 1

attackerkb 1

amazon 1

veracode 2

checkpoint_advisories 4

securityvulns 2

threatpost 11

zdt 1

ibm 10

symantec 1

packetstorm 1

thn 3

saint 8

canvas 1

cisa_kev 1

metasploit 1

exploitdb 1

freebsd 1

fireeye 1

securelist 1

gentoo 1

prion

Design/Logic Flaw

2013-01-14 22:55:00

Design/Logic Flaw

2013-01-10 21:55:00

nessus

Fedora 16 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16 (2013-0888)

2013-01-17 00:00:00

Ubuntu 12.10 : openjdk-7 vulnerabilities (USN-1693-1)

2013-01-17 00:00:00

Oracle Java SE 7 <= Update 10 Remote Code Execution

2012-01-10 00:00:00

openvas

RedHat Update for java-1.7.0-openjdk RHSA-2013:0165-01

2013-01-21 00:00:00

Fedora Update for java-1.7.0-openjdk FEDORA-2013-0853

2013-01-21 00:00:00

Ubuntu Update for openjdk-7 USN-1693-1

2013-01-21 00:00:00

oraclelinux

java-1.7.0-openjdk security update

2013-01-16 00:00:00

fedora

[SECURITY] Fedora 18 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc18

2013-01-16 19:35:17

[SECURITY] Fedora 17 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17

2013-01-16 19:42:39

[SECURITY] Fedora 16 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16

2013-01-16 19:49:12

suse

java-1_7_0-openjdk: update to icedtea-2.3.4 (critical)

2013-01-25 14:04:23

Security update for Java (important)

2013-03-13 00:05:30

ubuntucve

CVE-2012-3174

2013-01-14 00:00:00

CVE-2013-0422

2013-01-10 00:00:00

seebug

Oracle Java Runtime Environment 未明远程代码执行漏洞(CVE-2012-3174)

2013-01-16 00:00:00

Oracle Java 7 JmxMBeanServer类远程代码执行漏洞

2013-01-14 00:00:00

Java Applet JMX Remote Code Execution

2014-07-01 00:00:00

redhat

(RHSA-2013:0165) Important: java-1.7.0-openjdk security update

2013-01-16 00:00:00

(RHSA-2013:0156) Critical: java-1.7.0-oracle security update

2013-01-14 00:00:00

(RHSA-2013:0626) Critical: java-1.7.0-ibm security update

2013-03-11 00:00:00

cert

Java 7 fails to restrict access to privileged code

2013-01-10 00:00:00

centos

java security update

2013-01-16 20:29:20

ubuntu

OpenJDK 7 vulnerabilities

2013-01-16 00:00:00

zdi

Oracle Java Runtime Environment MethodHandle Security Manager Bypass Remote Code Execution Vulnerability

2013-02-01 00:00:00

cve

CVE-2013-0422

2013-01-10 21:55:00

attackerkb

CVE-2013-0422

2013-01-10 00:00:00

amazon

Important: java-1.7.0-openjdk

2013-02-03 12:35:00

veracode

Authorization Bypass

2019-01-15 08:53:56

Sandbox Restrictions Bypass

2019-05-02 04:46:00

checkpoint_advisories

Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)

2014-02-03 00:00:00

Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)

2014-01-07 00:00:00

Oracle Java JmxMBeanServer Package Sandbox Breach (CVE-2013-0422)

2013-01-13 00:00:00

securityvulns

0-day vulnerability in Oracle Java is used to install maliscious software

2013-01-21 00:00:00

[SE-2012-01] Java 7 Update 11 confirmed to be vulnerable

2013-01-21 00:00:00

threatpost

NBC Website Hacked, Leading Visitors to Citadel Banking Malware

2013-02-21 21:07:10

ADP-Themed Phishing Emails Lead to Blackhole Sites

2013-01-14 18:29:21

Emergency Zero-Day Patch Does Not Quiet Calls to Disable Java

2013-01-14 16:40:39

zdt

Java Applet JMX Remote Code Execution Vulnerability

2013-01-11 00:00:00

ibm

Security Bulletin: Security vulnerability in Oracle Java 7 impacts IBM Rational Collaborative Lifecycle Management products (CVE-2013-0422)

2018-06-17 04:42:53

Security Bulletin: Security vulnerability in Oracle Java 7 impacts IBM Rational Change (CVE-2013-0422)

2018-06-17 04:42:58

Security Bulletin: Potential security vulnerabilities in WebSphere Partner Gateway Advanced/Enterprise for the Oracle CPU February 2013.

2022-09-25 23:13:40

symantec

Oracle Java Runtime Environment CVE-2013-0422 Multiple Remote Code Execution Vulnerabilities

2013-01-10 00:00:00

packetstorm

Java Applet JMX Remote Code Execution

2013-01-11 00:00:00

thn

Oracle Patches Java Zero Day Vulnerability

2013-01-16 06:01:00

Oracle Patches Java Zero Day Vulnerability

2013-01-16 17:01:00

ICEPOL Ransomware Servers seized by Romanian Police that infected 260,000 Computers

2014-01-29 22:48:00

saint

Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape

2013-01-14 00:00:00

Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape

2013-01-14 00:00:00

Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape

2013-01-14 00:00:00

canvas

Immunity Canvas: JAVA_MBEANINSTANTIATOR_FINDCLASS

2013-01-10 21:55:00

cisa_kev

Oracle JRE Remote Code Execution Vulnerability

2022-05-25 00:00:00

metasploit

Java Applet JMX Remote Code Execution

2013-01-10 19:30:43

exploitdb

Java Applet JMX - Remote Code Execution (Metasploit) (1)

2013-01-11 00:00:00

freebsd

java 7.x -- security manager bypass

2013-01-10 00:00:00

fireeye

Internet Explorer 8 Exploit Found in Watering Hole Campaign Targeting Chinese Dissidents

2013-03-20 17:26:00

securelist

Investigation Report for the September 2014 Equation malware detection incident in the US

2017-11-16 10:00:34

gentoo

Oracle JRE/JDK: Multiple vulnerabilities

2014-01-27 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.3 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.094 Low

EPSS

Percentile

94.6%

JSON

Related for CVE-2012-3174

prion2 nessus19 openvas22 oraclelinux1 fedora3 suse2 ubuntucve2 seebug3 redhat3 cert1 centos1 ubuntu1 zdi1 cve1 attackerkb1 amazon1 veracode2 checkpoint_advisories4 securityvulns2 threatpost11 zdt1 ibm10 symantec1 packetstorm1 thn3 saint8 canvas1 cisa_kev1 metasploit1 exploitdb1 freebsd1 fireeye1 securelist1 gentoo1