Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...

CVE-2012-0500

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and...

CVE-2012-0501

CVE-2012-0501 (IBM context): An unspecified vulnerability in the Oracle JRE/JDK used by IBM InfoSphere BigInsights is described as allowing remote attackers to affect availability via unknown vectors. IBM’s security bulletin cites affected IBM InfoSphere BigInsights versions 1.1–1.4 and provides ...

CVE-2012-0504

Technical details for CVE-2012-0504 are not publicly provided in the supplied documents. No affected product/version or root cause is specified here. Monitor for updates in the connected sources.

CVE-2012-0506

In MiracleLinux 4, CVE-2012-0506 is listed as an Unspecified vulnerability in the Java Runtime Environment (JRE) component of the OpenJDK 1.6.0 runtime shipped with MiracleLinux 4 (java-1.6.0-openjdk-1.6.0.0-1.43.1.10.6.AXS4). The description notes the issue can affect integrity via unknown vecto...

CVE-2012-0503

CVE-2012-0503: Unspecified vulnerability in the Java Runtime Environment (JRE) component affects Oracle Java SE 7u2 and earlier, Java SE 6u30 and earlier, Java SE 5.0u33 and earlier, and 1.4.2_35 and earlier. The issue allows remote untrusted Java Web Start applications and untrusted applets to c...

CVE-2012-0497

CVE-2012-0497 is described as an unspecified vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7 Update 2 and earlier, and Java SE 6 Update 30 and earlier, allowing remote attackers to affect confidentiality, integrity, and availability via unknown vectors rel...

CVE-2012-0502

CVE-2012-0502 is an unspecified vulnerability in the Java Runtime Environment (JRE) that affects multiple Oracle Java SE branches (7u2 and earlier, 6u30 and earlier, 5.0u33 and earlier, and 1.4.2_35 and earlier) and can allow remote untrusted Java Web Start applications and untrusted applets to a...

java security update

CentOS Errata and Security Advisory CESA-2012:0135 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring Syste...

CVE-2012-0497

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

CVE-2012-0506

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via...

OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors...

OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...

OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality an...

OpenJDK: JavaSound incorrect bounds check (Sound, 7088367)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound...

Oracle Java SE Remote Java Runtime Environment Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability in Java Runtime Environment. An attacker can exploit this issue to bypass the Java sandbox restriction and execute arbitrary code. This vulnerability affects the following supported versions: 7 Update 2, 6 Update 30, 5.0...

Sun Java Web Start Plugin Command Line Argument Injection

This module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the...

PT-2012-1238

Name of the Vulnerable Software and Affected Versions Java Runtime Environment versions 5.0 Update 33 and earlier Java Runtime Environment versions 6 Update 30 and earlier Java Runtime Environment versions 7 Update 2 and earlier Description The issue is related to an unspecified vulnerability in...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS12-004...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...