Red Hat Security AdvisoryRHSA-2012:1225
java-1.7.0-oracle security update
Released 2012-09-04 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3, java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3, java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3 +2
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3, java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3, java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3, java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3, java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3 +2
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3, java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3, java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3 +2
Fixes 4 records
Priority CRITICAL 100KEV
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restri…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98536 · Published 2012-08-28 · Partial fix CWE-284
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05402 · Published 2012-08-30 · Partial fix
Priority MEDIUM 50
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0395 · Published 2012-08-30 · Partial fix
Priority LOW 17
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-de…
CVSS 2.0LOW 0.0· Network · No auth · Interaction — · EPSS 0.12471 · Published 2012-08-30 · Partial fix
THREATIST.IORead the docs