Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-0503
HistoryFeb 15, 2012 - 12:00 a.m.

CVE-2012-0503

2012-02-1500:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

85.6%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0
Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted
Java Web Start applications and untrusted Java applets to affect
confidentiality, integrity, and availability, related to I18n.

Notes

Author Note
mdeslaur in natty+, NetX and the plugin moved to the icedtea-web package
sbeattie red hat description: It was discovered that the use of TimeZone.setDefault() was not restricted by the SecurityManager, allowing an untrusted Java application or applet to set a new default time zone, and hence bypass Java sandbox restrictions.
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenjdk-6< 6b27-1.12.3-0ubuntu1~08.04.1UNKNOWN
ubuntu10.04noarchopenjdk-6< 6b20-1.9.13-0ubuntu1~10.04.1UNKNOWN
ubuntu10.10noarchopenjdk-6< 6b20-1.9.13-0ubuntu1~10.10.1UNKNOWN
ubuntu11.04noarchopenjdk-6< 6b22-1.10.6-0ubuntu1UNKNOWN
ubuntu11.10noarchopenjdk-6< 6b23~pre11-0ubuntu1.11.10.2UNKNOWN
ubuntu10.04noarchopenjdk-6b18< 6b18-1.8.13-0ubuntu1~10.04.1UNKNOWN
ubuntu10.10noarchopenjdk-6b18< 6b18-1.8.13-0ubuntu1~10.10.1UNKNOWN
ubuntu11.04noarchopenjdk-6b18< 6b18-1.8.13-0ubuntu1~11.04.1UNKNOWN
ubuntu11.10noarchopenjdk-7< 7u9-2.3.3-0ubuntu1~11.10.1UNKNOWN

Related

veracode 4
cve 1
prion 1
openvas 57
suse 7
redhat 8
nessus 38
ubuntu 2
amazon 1
fedora 14
oraclelinux 2
osv 1
debian 1
centos 1
ibm 3
securityvulns 1
seebug 1
gentoo 2
veracode
veracode
Information Disclosure
2019-05-02 04:41:05
Memory Corruption
2019-05-02 04:41:05
Memory Corruption
2019-05-02 04:41:05
cve
cve
CVE-2012-0503
2012-02-15 22:55:00
prion
prion
Design/Logic Flaw
2012-02-15 22:55:00
openvas
openvas
Oracle Java SE JRE Multiple Vulnerabilities - 01 - (Feb 2012) - Windows
2012-02-21 00:00:00
Oracle Java SE JDK Multiple Vulnerabilities - 01 - (Feb 2012) - Windows
2012-02-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0734-1)
2021-06-09 00:00:00
suse
suse
Security update for java-1_4_2-ibm-sap (important)
2012-08-21 19:08:40
Security update for IBM Java (important)
2012-06-13 20:08:24
Security update for java-1_4_2-ibm-sap (important)
2012-07-16 19:08:35
redhat
redhat
(RHSA-2012:0702) Critical: java-1.4.2-ibm security update
2012-05-30 00:00:00
(RHSA-2012:1080) Moderate: java-1.4.2-ibm-sap security update
2012-07-16 00:00:00
(RHSA-2012:0135) Critical: java-1.6.0-openjdk security update
2012-02-14 00:00:00
nessus
nessus
RHEL 5 : java-1.4.2-ibm (RHSA-2012:0702)
2013-01-24 00:00:00
SuSE 10 Security Update : IBM Java (ZYPP Patch Number 8151)
2012-06-14 00:00:00
SuSE 11.1 Security Update : IBM Java (SAT Patch Number 6360)
2013-01-25 00:00:00
ubuntu
ubuntu
OpenJDK 6 vulnerabilities
2012-02-24 00:00:00
OpenJDK 6 (ARM) vulnerabilities
2012-03-01 00:00:00
amazon
amazon
Critical: java-1.6.0-openjdk
2012-02-15 17:12:00
fedora
fedora
[SECURITY] Fedora 17 Update: java-1.7.0-openjdk-1.7.0.3-2.1.fc17
2012-02-28 10:45:39
[SECURITY] Fedora 16 Update: java-1.6.0-openjdk-1.6.0.0-68.1.11.4.fc16
2012-09-19 03:03:35
[SECURITY] Fedora 16 Update: java-1.6.0-openjdk-1.6.0.0-68.1.11.5.fc16
2012-10-18 00:30:15
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2012-02-28 00:00:00
java-1.6.0-openjdk security update
2012-02-15 00:00:00
osv
osv
openjdk-6 - several
2012-02-28 00:00:00
debian
debian
[SECURITY] [DSA 2420-1] openjdk-6 security update
2012-02-28 20:12:37
centos
centos
java security update
2012-02-15 10:26:37
ibm
ibm
Security Bulletin: Tivoli Storage Productivity Center - Oracle CPU February 2012, June 2012
2022-08-19 18:23:31
Potential Security Vulnerabilities With JavaTM SDKs
2018-06-17 14:05:25
Security Bulletin: Unspecified Vulnerabilities in Rational Synergy (CVE-2012-0502,CVE-2012-0503,CVE-2012-0506,CVE-2012-0507,CVE-2011-3563,CVE-2012-0500,CVE-2012-0497,CVE-2012-0498,CVE-2012-0499,CVE-2012-0500,CVE-2012-0501,CVE-2012-0505,CVE-2011-5035)
2020-12-22 17:41:28
securityvulns
securityvulns
Oracle Java multiple security vulnerabilities
2012-08-20 00:00:00
seebug
seebug
IBM Rational AppScan 8.x/7.x 多个安全漏洞
2012-06-16 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

85.6%

JSON
Related for UB:CVE-2012-0503
veracode4cve1prion1openvas57suse7redhat8nessus38ubuntu2amazon1fedora14oraclelinux2osv1debian1centos1ibm3securityvulns1seebug1gentoo2