CVE-2012-1720

2012-06-1621:55:03

[email protected]

web.nvd.nist.gov

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

5.2

Confidence

Low

EPSS

0.001

Percentile

26.5%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.

Affected configurations

Nvd

Node

oraclejdkRange≤1.7.0update4

oraclejreRange≤1.7.0update4

Node

oraclejdkRange≤1.6.0update32

oraclejreRange≤1.6.0update32

Node

sunjdkRange≤1.5.0update35

sunjreRange≤1.5.0update35

Node

sunjdkRange≤1.4.2_37

sunjreRange≤1.4.2_37

VendorProductVersionCPE
oraclejdk*cpe:2.3:a:oracle:jdk:*:update4:*:*:*:*:*:*
oraclejre*cpe:2.3:a:oracle:jre:*:update4:*:*:*:*:*:*
oraclejdk*cpe:2.3:a:oracle:jdk:*:update32:*:*:*:*:*:*
oraclejre*cpe:2.3:a:oracle:jre:*:update32:*:*:*:*:*:*
sunjdk*cpe:2.3:a:sun:jdk:*:update35:*:*:*:*:*:*
sunjre*cpe:2.3:a:sun:jre:*:update35:*:*:*:*:*:*
sunjdk*cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*
sunjre*cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	*	cpe:2.3:a:oracle:jdk::update4::::::*
oracle	jre	*	cpe:2.3:a:oracle:jre::update4::::::*
oracle	jdk	*	cpe:2.3:a:oracle:jdk::update32::::::*
oracle	jre	*	cpe:2.3:a:oracle:jre::update32::::::*
sun	jdk	*	cpe:2.3:a:sun:jdk::update35::::::*
sun	jre	*	cpe:2.3:a:sun:jre::update35::::::*
sun	jdk	*	cpe:2.3:a:sun:jdk::::::::
sun	jre	*	cpe:2.3:a:sun:jre::::::::