NVD

Id
46100  
Name
CVE-2012-4823  
Description
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-01-10  
Modified Date
2013-10-30  
Seq
2012-4823  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231356 46100 CVE-2012-4823 RHSA-2012:1466  View
231357 46100 CVE-2012-4823 RHSA-2012:1467  View
231358 46100 CVE-2012-4823 RHSA-2013:1455  View
231359 46100 CVE-2012-4823 RHSA-2013:1456  View
231360 46100 CVE-2012-4823 20120911 [SE-2012-01] Security vulnerabilities in IBM Java  View
231361 46100 CVE-2012-4823 IV29687  View
231362 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21615705  View
231363 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21615800  View
231364 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21616490  View
231365 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21616594  View
231366 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21616616  View
231367 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21616617  View
231368 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21616652  View
231369 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21616708  View
231370 46100 CVE-2012-4823 http://www-01.ibm.com/support/docview.wss?uid=swg21621154  View
231371 46100 CVE-2012-4823 55495  View
231372 46100 CVE-2012-4823 ibm-java-defineclass-code-execution(78767)  View
231373 46100 CVE-2012-4823 https://www-304.ibm.com/support/docview.wss?uid=swg21616546  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30199 JVNDB-2012-005906 IBM Java の JRE コンポーネントにおける任意のコードを実行される脆弱性 複数の IBM 製品、およびその他のベンダ製品で使用される IBM Java の JRE コンポーネントには、java.lang.ClassLoder defineClass() メソッドの安全でない使用に関連して、任意のコードを実行される脆弱性が存在します。 CVE-2012-4823 58061 CVE-2012-4823 46100 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005906.html 2012-10-05 2015-08-11 View