Ubuntu.comUB:CVE-2012-4681CVE-2012-4681
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in
Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute
arbitrary code via a crafted applet that bypasses SecurityManager
restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and
leveraging an exception with the forName method to access restricted
classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using
βreflection with a trusted immediate callerβ to leverage the getField
method to access and modify private fields, as exploited in the wild in
August 2012 using Gondzz.class and Gondvv.class.
Notes
| Author | Note |
|---|---|
| mdeslaur | in lucid+, NetX and the plugin moved to the icedtea-web package |
| tyhicks | Per oss-security thread, OpenJDK <= 7u4-b31 is also affected sbeattie verified that the openjdk vulnerability test does not work on openjdk-6 in precise |
References
blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html
labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/
mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-August/020065.html
seclists.org/oss-sec/2012/q3/308
community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day
launchpad.net/bugs/cve/CVE-2012-4681
nvd.nist.gov/vuln/detail/CVE-2012-4681
security-tracker.debian.org/tracker/CVE-2012-4681
www.cve.org/CVERecord?id=CVE-2012-4681
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%