ByteOS Network

CVE Vulnerability Details :

CVE-2012-0507

PUBLISHED

Known KEV

More Info Official Page

Assigner-oracle

Assigner Org ID-43595867-4340-4103-b7a2-9a5208d29a85

View Known Exploited Vulnerability (KEV) details

Published At-07 Jun, 2012 | 22:00

Updated At-30 Jul, 2025 | 01:46

▼CVE Numbering Authority (CNA)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
http://marc.info/?l=bugtraq&m=133847939902305&w=2	vendor-advisory x_refsource_HP
http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html	x_refsource_CONFIRM
http://secunia.com/advisories/48692	third-party-advisory x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=134254866602253&w=2	vendor-advisory x_refsource_HP
http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/	x_refsource_MISC
http://secunia.com/advisories/48589	third-party-advisory x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=133365109612558&w=2	vendor-advisory x_refsource_HP
http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html	vendor-advisory x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html	vendor-advisory x_refsource_SUSE
http://secunia.com/advisories/48950	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/48948	third-party-advisory x_refsource_SECUNIA
http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx	x_refsource_MISC
http://marc.info/?l=bugtraq&m=133847939902305&w=2	vendor-advisory x_refsource_HP
http://secunia.com/advisories/48915	third-party-advisory x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=133364885411663&w=2	vendor-advisory x_refsource_HP
http://www.debian.org/security/2012/dsa-2420	vendor-advisory x_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2012-0508.html	vendor-advisory x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=788994	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=134254957702612&w=2	vendor-advisory x_refsource_HP
http://rhn.redhat.com/errata/RHSA-2012-0514.html	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/52161	vdb-entry x_refsource_BID
http://marc.info/?l=bugtraq&m=133365109612558&w=2	vendor-advisory x_refsource_HP
http://marc.info/?l=bugtraq&m=133364885411663&w=2	vendor-advisory x_refsource_HP
http://marc.info/?l=bugtraq&m=134254957702612&w=2	vendor-advisory x_refsource_HP

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://marc.info/?l=bugtraq&m=133847939902305&w=2	vendor-advisory x_refsource_HP x_transferred
http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/48692	third-party-advisory x_refsource_SECUNIA x_transferred
http://marc.info/?l=bugtraq&m=134254866602253&w=2	vendor-advisory x_refsource_HP x_transferred
http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/	x_refsource_MISC x_transferred
http://secunia.com/advisories/48589	third-party-advisory x_refsource_SECUNIA x_transferred
http://marc.info/?l=bugtraq&m=133365109612558&w=2	vendor-advisory x_refsource_HP x_transferred
http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3	x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html	vendor-advisory x_refsource_SUSE x_transferred
http://rhn.redhat.com/errata/RHSA-2013-1455.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/48950	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/48948	third-party-advisory x_refsource_SECUNIA x_transferred
http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx	x_refsource_MISC x_transferred
http://marc.info/?l=bugtraq&m=133847939902305&w=2	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/48915	third-party-advisory x_refsource_SECUNIA x_transferred
http://marc.info/?l=bugtraq&m=133364885411663&w=2	vendor-advisory x_refsource_HP x_transferred
http://www.debian.org/security/2012/dsa-2420	vendor-advisory x_refsource_DEBIAN x_transferred
http://rhn.redhat.com/errata/RHSA-2012-0508.html	vendor-advisory x_refsource_REDHAT x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=788994	x_refsource_CONFIRM x_transferred
http://marc.info/?l=bugtraq&m=134254957702612&w=2	vendor-advisory x_refsource_HP x_transferred
http://rhn.redhat.com/errata/RHSA-2012-0514.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/52161	vdb-entry x_refsource_BID x_transferred
http://marc.info/?l=bugtraq&m=133365109612558&w=2	vendor-advisory x_refsource_HP x_transferred
http://marc.info/?l=bugtraq&m=133364885411663&w=2	vendor-advisory x_refsource_HP x_transferred
http://marc.info/?l=bugtraq&m=134254957702612&w=2	vendor-advisory x_refsource_HP x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-843	CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Metrics

Version	Base score	Base severity	Vector
3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-03-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0507

Timeline

Event	Date
CVE-2012-0507 added to CISA KEV	2022-03-03 00:00:00

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References