NVD

Id
43438  
Name
CVE-2012-1541  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit-based browsers and the Javascript engine, which allows remote attackers to execute arbitrary code by modifying DOM nodes that contain applet elements in a way that triggers an incorrect reference count and a use after free.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-02-01  
Modified Date
2013-12-19  
Seq
2012-1541  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218257 43438 CVE-2012-1541 HPSBUX02857  View
218258 43438 CVE-2012-1541 HPSBUX02864  View
218259 43438 CVE-2012-1541 HPSBMU02874  View
218260 43438 CVE-2012-1541 oval:org.mitre.oval:def:16384  View
218261 43438 CVE-2012-1541 oval:org.mitre.oval:def:19070  View
218262 43438 CVE-2012-1541 oval:org.mitre.oval:def:19499  View
218263 43438 CVE-2012-1541 RHSA-2013:0236  View
218264 43438 CVE-2012-1541 RHSA-2013:0237  View
218265 43438 CVE-2012-1541 RHSA-2013:1455  View
218266 43438 CVE-2012-1541 RHSA-2013:1456  View
218267 43438 CVE-2012-1541 VU#858729  View
218268 43438 CVE-2012-1541 http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html  View
218269 43438 CVE-2012-1541 TA13-032A  View
218270 43438 CVE-2012-1541 20130201 Multiple Vendor WebKit JRE Plugin Module Use-after-Free Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19779 JVNDB-2013-001354 Oracle Java SE の Java Runtime Environment における Deployment の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、Deployment に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2012-1541 54779 CVE-2012-1541 43438 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001354.html 2013-02-01 2015-03-18 View