Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-0497
HistoryFeb 15, 2012 - 12:00 a.m.

CVE-2012-0497

2012-02-1500:00:00
ubuntu.com
ubuntu.com
10

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.3%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier,
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to 2D.

Notes

Author Note
mdeslaur in natty+, NetX and the plugin moved to the icedtea-web package
sbeattie red hat description: It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine (JVM), or bypass Java sandbox restrictions.
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchopenjdk-6<ย 6b20-1.9.13-0ubuntu1~10.04.1UNKNOWN
ubuntu10.10noarchopenjdk-6<ย 6b20-1.9.13-0ubuntu1~10.10.1UNKNOWN
ubuntu11.04noarchopenjdk-6<ย 6b22-1.10.6-0ubuntu1UNKNOWN
ubuntu11.10noarchopenjdk-6<ย 6b23~pre11-0ubuntu1.11.10.2UNKNOWN
ubuntu10.04noarchopenjdk-6b18<ย 6b18-1.8.13-0ubuntu1~10.04.1UNKNOWN
ubuntu10.10noarchopenjdk-6b18<ย 6b18-1.8.13-0ubuntu1~10.10.1UNKNOWN
ubuntu11.04noarchopenjdk-6b18<ย 6b18-1.8.13-0ubuntu1~11.04.1UNKNOWN
ubuntu11.10noarchopenjdk-7<ย 7u9-2.3.3-0ubuntu1~11.10.1UNKNOWN

Related

veracode 4
cve 1
prion 1
seebug 2
openvas 56
nessus 31
suse 3
ubuntu 2
amazon 1
fedora 14
osv 1
oraclelinux 2
debian 1
centos 1
redhat 4
ibm 2
securityvulns 1
oracle 1
gentoo 2
veracode
veracode
Information Disclosure
2019-05-02 04:41:04
Memory Corruption
2019-05-02 04:41:04
Memory Corruption
2019-05-02 04:41:05
cve
cve
CVE-2012-0497
2012-02-15 22:55:00
prion
prion
Design/Logic Flaw
2012-02-15 22:55:00
seebug
seebug
Oracle Java SE JRE 2Dๅญ็ป„ไปถ่ฟœ็จ‹ๅฎ‰ๅ…จๆผๆดž(CVE-2012-0497)
2012-02-16 00:00:00
IBM Rational AppScan 8.x/7.x ๅคšไธชๅฎ‰ๅ…จๆผๆดž
2012-06-16 00:00:00
openvas
openvas
Oracle Java SE JRE Multiple Vulnerabilities - 02 - (Feb 2012) - Windows
2012-02-21 00:00:00
Oracle Java SE JDK Multiple Vulnerabilities - 02 - (Feb 2012) - Windows
2012-02-21 00:00:00
Oracle Java SE JDK Multiple Vulnerabilities - February 2012 (Windows - 02)
2012-02-21 00:00:00
nessus
nessus
Oracle JRockit R27 < R27.7.2.5 / R28 < R28.2.3.13 Multiple Vulnerabilities (April 2012 CPU)
2014-07-22 00:00:00
Fedora 17 : java-1.7.0-openjdk-1.7.0.3-2.1.fc17 (2012-2595)
2012-02-29 00:00:00
Fedora 16 : java-1.6.0-openjdk-1.6.0.0-65.1.11.1.fc16 (2012-1711)
2012-02-20 00:00:00
suse
suse
Security update for Java 1.6.0 (important)
2012-02-27 21:08:20
java-1_6_0-openjdk: Update to iced tea 1.11.1 b24 security release (important)
2012-02-27 21:08:27
Security update for IBM Java 1.6.0 (important)
2012-05-09 21:08:17
ubuntu
ubuntu
OpenJDK 6 (ARM) vulnerabilities
2012-03-01 00:00:00
OpenJDK 6 vulnerabilities
2012-02-24 00:00:00
amazon
amazon
Critical: java-1.6.0-openjdk
2012-02-15 17:12:00
fedora
fedora
[SECURITY] Fedora 17 Update: java-1.7.0-openjdk-1.7.0.3-2.1.fc17
2012-02-28 10:45:39
[SECURITY] Fedora 16 Update: java-1.6.0-openjdk-1.6.0.0-68.1.11.4.fc16
2012-09-19 03:03:35
[SECURITY] Fedora 16 Update: java-1.6.0-openjdk-1.6.0.0-68.1.11.5.fc16
2012-10-18 00:30:15
osv
osv
openjdk-6 - several
2012-02-28 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2012-02-15 00:00:00
java-1.6.0-openjdk security update
2012-02-28 00:00:00
debian
debian
[SECURITY] [DSA 2420-1] openjdk-6 security update
2012-02-28 20:11:47
centos
centos
java security update
2012-02-15 10:26:37
redhat
redhat
(RHSA-2012:0135) Critical: java-1.6.0-openjdk security update
2012-02-14 00:00:00
(RHSA-2012:0322) Important: java-1.6.0-openjdk security update
2012-02-21 00:00:00
(RHSA-2012:0514) Critical: java-1.6.0-ibm security update
2012-04-24 00:00:00
ibm
ibm
Potential Security Vulnerabilities With JavaTM SDKs
2018-06-17 14:05:25
Security Bulletin: Unspecified Vulnerabilities in Rational Synergy (CVE-2012-0502,CVE-2012-0503,CVE-2012-0506,CVE-2012-0507,CVE-2011-3563,CVE-2012-0500,CVE-2012-0497,CVE-2012-0498,CVE-2012-0499,CVE-2012-0500,CVE-2012-0501,CVE-2012-0505,CVE-2011-5035)
2020-12-22 17:41:28
securityvulns
securityvulns
Oracle Java multiple security vulnerabilities
2012-08-20 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2012
2012-07-19 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.3%

JSON
Related for UB:CVE-2012-0497
veracode4cve1prion1seebug2openvas56nessus31suse3ubuntu2amazon1fedora14osv1oraclelinux2debian1centos1redhat4ibm2securityvulns1oracle1gentoo2