Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable6664.PRM
HistoryJan 10, 2012 - 12:00 a.m.

Oracle Java SE 7 <= Update 10 Remote Code Execution

2012-01-1000:00:00
Tenable
www.tenable.com
36
JSON

This version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is 7 Update 10 or earlier and is, therefore, potentially affected by the following security issues:

  • An unspecified issue exists in the Libraries component. (CVE-2012-3174)

  • An error exists in the โ€˜MBeanInstantiator.findClassโ€™ method that could allow remote, arbitrary code execution. (CVE-2013-0422)

Note that, according the advisory, these issues apply to client deployments of Java only and can only be exploited through untrusted โ€˜Java Web Startโ€™ applications and untrusted Java applets

Binary data 6664.prm
VendorProductVersionCPE
oraclejava_secpe:/a:oracle:java_se

Related

openvas 21
nessus 18
cve 2
oraclelinux 1
fedora 3
suse 2
ubuntucve 2
prion 2
seebug 3
redhat 3
cert 1
centos 1
ubuntu 1
zdi 1
attackerkb 1
amazon 1
veracode 2
checkpoint_advisories 4
securityvulns 2
threatpost 11
zdt 1
ibm 10
packetstorm 1
symantec 1
thn 3
saint 8
canvas 1
cisa_kev 1
metasploit 1
exploitdb 1
freebsd 1
fireeye 1
securelist 1
gentoo 1
openvas
openvas
Fedora Update for java-1.7.0-openjdk FEDORA-2013-0853
2013-01-21 00:00:00
CentOS Update for java CESA-2013:0165 centos5
2013-01-21 00:00:00
Ubuntu Update for openjdk-7 USN-1693-1
2013-01-21 00:00:00
nessus
nessus
Fedora 17 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17 (2013-0868)
2013-01-17 00:00:00
Oracle Java SE 7 < Update 11 Multiple Vulnerabilities (Unix)
2013-02-22 00:00:00
CentOS 5 / 6 : java-1.7.0-openjdk (CESA-2013:0165)
2013-01-17 00:00:00
cve
cve
CVE-2012-3174
2013-01-14 22:55:00
CVE-2013-0422
2013-01-10 21:55:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2013-01-16 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc18
2013-01-16 19:35:17
[SECURITY] Fedora 17 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17
2013-01-16 19:42:39
[SECURITY] Fedora 16 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16
2013-01-16 19:49:12
suse
suse
java-1_7_0-openjdk: update to icedtea-2.3.4 (critical)
2013-01-25 14:04:23
Security update for Java (important)
2013-03-13 00:05:30
ubuntucve
ubuntucve
CVE-2012-3174
2013-01-14 00:00:00
CVE-2013-0422
2013-01-10 00:00:00
prion
prion
Design/Logic Flaw
2013-01-14 22:55:00
Design/Logic Flaw
2013-01-10 21:55:00
seebug
seebug
Oracle Java Runtime Environment ๆœชๆ˜Ž่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒๆผๆดž(CVE-2012-3174)
2013-01-16 00:00:00
Oracle Java 7 JmxMBeanServer็ฑป่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒๆผๆดž
2013-01-14 00:00:00
Java Applet JMX Remote Code Execution
2014-07-01 00:00:00
redhat
redhat
(RHSA-2013:0165) Important: java-1.7.0-openjdk security update
2013-01-16 00:00:00
(RHSA-2013:0156) Critical: java-1.7.0-oracle security update
2013-01-14 00:00:00
(RHSA-2013:0626) Critical: java-1.7.0-ibm security update
2013-03-11 00:00:00
cert
cert
Java 7 fails to restrict access to privileged code
2013-01-10 00:00:00
centos
centos
java security update
2013-01-16 20:29:20
ubuntu
ubuntu
OpenJDK 7 vulnerabilities
2013-01-16 00:00:00
zdi
zdi
Oracle Java Runtime Environment MethodHandle Security Manager Bypass Remote Code Execution Vulnerability
2013-02-01 00:00:00
attackerkb
attackerkb
CVE-2013-0422
2013-01-10 00:00:00
amazon
amazon
Important: java-1.7.0-openjdk
2013-02-03 12:35:00
veracode
veracode
Authorization Bypass
2019-01-15 08:53:56
Sandbox Restrictions Bypass
2019-05-02 04:46:00
checkpoint_advisories
checkpoint_advisories
Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)
2014-02-03 00:00:00
Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)
2014-01-07 00:00:00
Oracle Java JmxMBeanServer Package Sandbox Breach (CVE-2013-0422)
2013-01-13 00:00:00
securityvulns
securityvulns
0-day vulnerability in Oracle Java is used to install maliscious software
2013-01-21 00:00:00
[SE-2012-01] Java 7 Update 11 confirmed to be vulnerable
2013-01-21 00:00:00
threatpost
threatpost
NBC Website Hacked, Leading Visitors to Citadel Banking Malware
2013-02-21 21:07:10
ADP-Themed Phishing Emails Lead to Blackhole Sites
2013-01-14 18:29:21
Emergency Zero-Day Patch Does Not Quiet Calls to Disable Java
2013-01-14 16:40:39
zdt
zdt
Java Applet JMX Remote Code Execution Vulnerability
2013-01-11 00:00:00
ibm
ibm
Security Bulletin: Security vulnerability in Oracle Java 7 impacts IBM Rational Collaborative Lifecycle Management products (CVE-2013-0422)
2018-06-17 04:42:53
Security Bulletin: Security vulnerability in Oracle Java 7 impacts IBM Rational Change (CVE-2013-0422)
2018-06-17 04:42:58
Security Bulletin: Potential security vulnerabilities in WebSphere Partner Gateway Advanced/Enterprise for the Oracle CPU February 2013.
2022-09-25 23:13:40
packetstorm
packetstorm
Java Applet JMX Remote Code Execution
2013-01-11 00:00:00
symantec
symantec
Oracle Java Runtime Environment CVE-2013-0422 Multiple Remote Code Execution Vulnerabilities
2013-01-10 00:00:00
thn
thn
Oracle Patches Java Zero Day Vulnerability
2013-01-16 06:01:00
Oracle Patches Java Zero Day Vulnerability
2013-01-16 17:01:00
ICEPOL Ransomware Servers seized by Romanian Police that infected 260,000 Computers
2014-01-29 22:48:00
saint
saint
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
canvas
canvas
Immunity Canvas: JAVA_MBEANINSTANTIATOR_FINDCLASS
2013-01-10 21:55:00
cisa_kev
cisa_kev
Oracle JRE Remote Code Execution Vulnerability
2022-05-25 00:00:00
metasploit
metasploit
Java Applet JMX Remote Code Execution
2013-01-10 19:30:43
exploitdb
exploitdb
Java Applet JMX - Remote Code Execution (Metasploit) (1)
2013-01-11 00:00:00
freebsd
freebsd
java 7.x -- security manager bypass
2013-01-10 00:00:00
fireeye
fireeye
Internet Explorer 8 Exploit Found in Watering Hole Campaign Targeting Chinese Dissidents
2013-03-20 17:26:00
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00
JSON
Related for 6664.PRM
openvas21nessus18cve2oraclelinux1fedora3suse2ubuntucve2prion2seebug3redhat3cert1centos1ubuntu1zdi1attackerkb1amazon1veracode2checkpoint_advisories4securityvulns2threatpost11zdt1ibm10packetstorm1symantec1thn3saint8canvas1cisa_kev1metasploit1exploitdb1freebsd1fireeye1securelist1gentoo1