PT-2012-2662
CVE-2012-0547
·
Published
2012-08-30
·
Updated
2024-06-15
Description by
CVSS 2.0
0.0
LowMetricsAV:N/AC:L/Au:N/C:N/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 7 Update 6 and earlier
Oracle Java SE versions 6 Update 34 and earlier
Description
The issue is related to a security-in-depth problem in the Java Runtime Environment (JRE) component, specifically involving AWT. This problem is not directly exploitable but can be used to aggravate other security vulnerabilities that can be directly exploited. The issue has remote attack vectors.
Recommendations
For Oracle Java SE versions 7 Update 6 and earlier, update to a version later than Update 6.
For Oracle Java SE versions 6 Update 34 and earlier, update to a version later than Update 34.
As a temporary workaround, consider restricting access to AWT components to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾