CVE-2012-0547

CVE Details

Release Date:

2012-08-30

Description

Unspecified vulnerability in the Java Runtime Environment (JRE)component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited. NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to toolkit internals references.

See more information about CVE-2012-0547 from MITRE CVE dictionary and NIST NVD

CVSS v2.0 metrics

NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.

Base Score:		Base Metrics:
Access Vector:	Undefined	Attack Complexity:	Undefined
Authentication:	None required	Confidentiality Impact:	Undefined
Integrity Impact:	Undefined	Availability Impact:	Undefined

Errata information

Platform	Errata	Release Date
Oracle Linux version 5 (java-1.6.0-openjdk)	ELSA-2012-1222	2012-09-03
Oracle Linux version 6 (java-1.6.0-openjdk)	ELSA-2012-1221	2012-09-03
Oracle Linux version 6 (java-1.7.0-openjdk)	ELSA-2012-1223	2012-09-03

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team