Oracle Java doPrivilegedWithCombiner Security Manager Bypass Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or run a malicious file. The specific bypass exists within usage of...

OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933)

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the...

OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries...

Fedora 18 : java-1.7.0-openjdk-1.7.0.9-2.3.7.0.fc18 (2013-2764)

8004937 - MethodHandles proxy fix 8006439 - MethodHandles, fix 8006446 - JMX. CreateMBeanServerTest.java fails due to missing MBeanServerImpl. 8006777 - SSL/TLS more info 8007611 - Logging behavior in applet changed 8007688 - Certificate Blacklist more info 8007393 - Possible race condition after...

Fedora 17 : java-1.7.0-openjdk-1.7.0.9-2.3.7.0.fc17 (2013-2813)

8004937 - MethodHandles proxy fix 8006439 - MethodHandles, fix 8006446 - JMX. CreateMBeanServerTest.java fails due to missing MBeanServerImpl. 8006777 - SSL/TLS more info 8007611 - Logging behavior in applet changed 8007688 - Certificate Blacklist more info 8007393 - Possible race condition after...

OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries...

OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933)

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the...

OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933)

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the...

Immunity Canvas: JAVA_CVE_2012_5088

Name| javaCVE20125088 ---|--- CVE| CVE-2012-5088 Exploit Pack| CANVAS Description| Java MethodHandles.Lookup Remote Code Execution Notes| CVE Name: CVE-2012-5088 VENDOR: Sun Notes: The exploitation technique is abusing bug patched in CVE-2012-5088 which is allowing to use reflection with full...

OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries...