CVE-2012-0506

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via...

PT-2012-2615

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 2 Java SE versions prior to 6 Update 30 Java SE versions prior to 5.0 Update 33 Java SE versions prior to 1.4.2 35 JavaFX versions prior to 2.0.2 Description The issue affects the Java Runtime Environment...

PT-2012-2620

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier, 6 Update 30 and earlier Description The issue affects confidentiality, integrity, and availability. It is related to the Install and Java Update mechanism in the Java Runtime Environment component...

PT-2012-2614

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier Description The issue affects the Java Runtime Environment component, allowing remote attackers to impact confidentiality, integrity, and...

OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors...

OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality an...

OpenJDK: JavaSound incorrect bounds check (Sound, 7088367)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound...

OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...

Sun Java Web Start Plugin Command Line Argument Injection

This module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the...

PT-2012-2618

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier Java SE versions 6 Update 30 and earlier Java SE versions 5.0 Update 33 and earlier Java SE versions 1.4.2 35 and earlier Description The issue affects the confidentiality and availability of systems due...

PT-2012-2613

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier, 6 Update 30 and earlier Description The issue affects confidentiality, integrity, and availability. It is related to the 2D component in the Java Runtime Environment, but the specific vectors of the iss...

PT-2012-2619

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier Java SE versions 6 Update 30 and earlier Java SE versions 5.0 Update 33 and earlier Java SE version 1.4.2 35 and earlier Description The issue affects the Java Runtime Environment component, allowing...

PT-2012-2621

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier Java SE versions 6 Update 30 and earlier Java SE versions 5 Update 33 and earlier Java SE version 1.4.2 35 and earlier Description The issue affects the Java Runtime Environment component, allowing remot...

Oracle Java SE Remote Java Runtime Environment Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability in Java Runtime Environment. An attacker can exploit this issue to bypass the Java sandbox restriction and execute arbitrary code. This vulnerability affects the following supported versions: 7 Update 2, 6 Update 30, 5.0...

PT-2012-1716

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier Java SE versions 6 Update 30 and earlier Java SE versions 5.0 Update 33 and earlier Java SE version 1.4.2 35 and earlier Description The issue affects confidentiality and availability via unknown vectors...

PT-2012-1238

Name of the Vulnerable Software and Affected Versions Java Runtime Environment versions 5.0 Update 33 and earlier Java Runtime Environment versions 6 Update 30 and earlier Java Runtime Environment versions 7 Update 2 and earlier Description The issue is related to an unspecified vulnerability in...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS12-004...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Design/Logic Flaw

Unspecified vulnerability in the Virtual Desktop Infrastructure VDI component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in...

OpenJDK: missing SecurityManager checks in scripting engine (Scripting, 7046823)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to...