CVE-2012-4301

2013-02-0200:55:01

mitre

web.nvd.nist.gov

cve-2012-4301

oracle

java se

javafx

vulnerability

remote attackers

confidentiality

integrity

availability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.121

Percentile

95.4%

JSON

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that this issue allows remote attackers to execute arbitrary code via an “invalid type case” in the init method of the D3DShader class in the com.sun.prism.d3d package. CPU.

Affected configurations

Nvd

Node

oraclejavafxRange≤2.2.4

oraclejavafxMatch2.0

oraclejavafxMatch2.0.2

oraclejavafxMatch2.0.3

oraclejavafxMatch2.1

oraclejavafxMatch2.2

oraclejavafxMatch2.2.3

VendorProductVersionCPE
oraclejavafxcpe:/a:oracle:javafx::::
oraclejavafx2.0.2cpe:/a:oracle:javafx:2.0.2:::
oraclejavafx2.2cpe:/a:oracle:javafx:2.2:::
oraclejavafx2.2.3cpe:/a:oracle:javafx:2.2.3:::
oraclejavafx2.1cpe:/a:oracle:javafx:2.1:::
oraclejavafx2.0cpe:/a:oracle:javafx:2.0:::
oraclejavafx2.0.3cpe:/a:oracle:javafx:2.0.3:::

Vendor	Product	Version	CPE
oracle	javafx		cpe:/a:oracle:javafx::::
oracle	javafx	2.0.2	cpe:/a:oracle:javafx:2.0.2:::
oracle	javafx	2.2	cpe:/a:oracle:javafx:2.2:::
oracle	javafx	2.2.3	cpe:/a:oracle:javafx:2.2.3:::
oracle	javafx	2.1	cpe:/a:oracle:javafx:2.1:::
oracle	javafx	2.0	cpe:/a:oracle:javafx:2.0:::
oracle	javafx	2.0.3	cpe:/a:oracle:javafx:2.0.3:::