CVE-2012-1541
- State
- Published
- Severity
- Not scored
- Published
- Feb 2, 2013
- Updated
- Aug 6, 2024
- Reserved
- Mar 8, 2012
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit-based browsers and the Javascript engine, which allows remote attackers to execute arbitrary code by modifying DOM nodes that contain applet elements in a way that triggers an incorrect reference count and a use after free.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:19070vdb-entrysignature
- oval:org.mitre.oval:def:19499vdb-entrysignature
- SSRT101156vendor-advisory
- TA13-032Athird-party-advisory
- RHSA-2013:0236vendor-advisory
- RHSA-2013:1455vendor-advisory
- VU#858729third-party-advisory
- RHSA-2013:0237vendor-advisory
- HPSBUX02857vendor-advisory
- HPSBMU02874vendor-advisory
- 57697vdb-entry
- 20130201 Multiple Vendor WebKit JRE Plugin Module Use-after-Free Vulnerabilitythird-party-advisory
- RHSA-2013:1456vendor-advisory
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
- oval:org.mitre.oval:def:16384vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.