CVE-2012-4416

Aliases:CGA-333p-xr7x-7pjrCGA-3j94-6x3v-9g84CGA-4689-662m-42fjCGA-5f5r-2jfh-qqmqCGA-5vpm-7xff-vxppCGA-6j33-4w6f-26q8CGA-6x7p-rchc-6wvpCGA-88cq-p2f7-g3jfCGA-8f4c-3gwv-7mc5CGA-8m75-gc9w-j7qmCGA-cvjv-x49h-hx8hCGA-f2w7-qq67-6r89CGA-fcr4-26hw-vqmwCGA-fjp6-2gjc-3q58CGA-g982-w56j-g4xcCGA-gpw2-wqc3-27jgCGA-grhj-3x9v-ff6rCGA-j6q4-568h-2jr3CGA-jhj4-jh99-4p24CGA-jmr7-cff7-wmg6CGA-jv8f-55qx-c2hgCGA-jw3q-3mqr-hjvcCGA-jxm7-c84m-9975CGA-p83f-8r56-54wgCGA-q5cx-hv7h-vj22CGA-qxm3-rjcr-fw9gCGA-rwjh-4pcr-5r6rCGA-vqwm-25fx-qgpwCGA-x37h-26hm-hv9jCGA-x4p5-cmf5-33cgCGA-xgpv-qc2p-38rgCGA-xwgf-7fqq-jrgf
Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 16 Oct 2012, 21:29
Last modified:06 Aug 2024, 20:35

Vulnerability Summary

Overall Risk (default)
medium
26/100
CVSS Score
6.4 MEDIUM
v2.0 (nvd)
EPSS Score
3.39% LOW
3% probability +0.66%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Oct 2012, 21:29
Published
Vulnerability first disclosed
06 Aug 2024, 20:35
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.4AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS Trends

Current EPSS score: 3.39%• Percentile: 88%

Affected Systems

  • chainguard•openjdk-11-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-17-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-21-openj9-default-policy

    < 0.48.0-r2

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.53.0-r1

  • oracle•jdk

    ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34

  • oracle•jre

    ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34

  • sun•jdk

    1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2 | 1.6.0.200:update20 | 1.6.0.210:update21

  • sun•jre

    1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7

References (18)