CVE-2012-5078 - Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows re

CVE-2012-5078

Summary

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2012-5080. Per: http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html "Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)"

References

Vulnerable Configurations

cpe:2.3:a:oracle:javafx:1.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.2:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 19-09-2017 - 01:35)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

oval via4

accepted

2013-06-03T04:02:52.820-04:00

class

vulnerability

contributors

name	Sergey Artykhov
organization	ALTX-SOFT

definition_extensions

comment	JavaFX 2.x is installed
oval	oval:org.mitre.oval:def:16479

description

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

family

windows

oval:org.mitre.oval:def:16308

status

accepted

submitted

2013-04-17T10:26:26.748+04:00

title

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

version

refmap via4

bid	56066
confirm	http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
suse	SUSE-SU-2012:1398

Last major update

19-09-2017 - 01:35

Published

16-10-2012 - 21:55

Last modified

19-09-2017 - 01:35