Design/Logic Flaw

2012-08-2800:55:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%

JSON

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using “reflection with a trusted immediate caller” to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

CPENameOperatorVersion
jdkeq1.7.0 update6
jdkeq1.7.0 update5
jdkeq1.7.0 update2
jdkeq1.7.0 update3
jdkeq1.7.0 update1
jdkeq1.7.0 update4
jdkeq1.6.0
jdkeq1.6.0 update10
jdkeq1.6.0 update33
jdkeq1.6.0 update25

Name	Operator	Version
jdk	eq	1.7.0 update6
jdk	eq	1.7.0 update5
jdk	eq	1.7.0 update2
jdk	eq	1.7.0 update3
jdk	eq	1.7.0 update1
jdk	eq	1.7.0 update4
jdk	eq	1.6.0
jdk	eq	1.6.0 update10
jdk	eq	1.6.0 update33
jdk	eq	1.6.0 update25