CVE-2012-0507
CRITICALCVSS 9.8Known ExploitedCISA Known Exploited Vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2012-0507
Remediation deadline: March 24, 2022
Ransomware use: Known
Description
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
Timeline
Published:June 7th, 2012 10:55 PM
Last modified:August 14th, 2026 5:16 AM
Added to KEV:March 3rd, 2022
CVSS Scoring
CVSS v3: 9.8 (CRITICAL)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2: 10.0
Affected Software
From NVD CPE configuration data
Vendors
sunoracledebiansuse
Products
jredebian_linuxlinux_enterprise_desktoplinux_enterprise_javalinux_enterprise_serverlinux_enterprise_software_development_kit
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
- http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspxBroken Link
- http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.htmlIssue Tracking
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.htmlMailing List
- http://marc.info/?l=bugtraq&m=133364885411663&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=133365109612558&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=133847939902305&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=134254866602253&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=134254957702612&w=2Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0508.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0514.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1455.htmlThird Party Advisory
- http://secunia.com/advisories/48589Broken Link
- http://secunia.com/advisories/48692Broken Link
- http://secunia.com/advisories/48915Broken Link
- http://secunia.com/advisories/48948Broken Link
- http://secunia.com/advisories/48950Broken Link
- http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3Broken Link
- http://www.debian.org/security/2012/dsa-2420Mailing List
- http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.htmlVendor Advisory
- http://www.securityfocus.com/bid/52161Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=788994Issue Tracking
- http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspxBroken Link
- http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.htmlIssue Tracking
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.htmlMailing List
- http://marc.info/?l=bugtraq&m=133364885411663&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=133365109612558&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=133847939902305&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=134254866602253&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=134254957702612&w=2Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0508.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0514.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1455.htmlThird Party Advisory
- http://secunia.com/advisories/48589Broken Link
- http://secunia.com/advisories/48692Broken Link
- http://secunia.com/advisories/48915Broken Link
- http://secunia.com/advisories/48948Broken Link
- http://secunia.com/advisories/48950Broken Link
- http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3Broken Link
- http://www.debian.org/security/2012/dsa-2420Mailing List
- http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.htmlVendor Advisory
- http://www.securityfocus.com/bid/52161Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=788994Issue Tracking
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0507US Government Resource
Source: NIST NVD · Data may lag official sources by up to one minute