CVE-2012-0507KEV · OVERDUECWE-843

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Critical · published June 8, 2012

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.9th percentile for exploit probability.

1673
days past CISA
deadline
CVSS v3.1
9.8
EPSS
98%
Percentile
99.9
In the wild
Confirmed
What it is

🚨 A remote attacker can crash your JVM with just the right exploit — and it's all thanks to a sneaky flaw in the Java Runtime Environment! 🔥 Think of it like a restaurant where the chef has a hidden ingredient that could make anyone sick — if the kitchen (your server) isn't prepared for it, a single order could ruin dinner for everyone! This vulnerability allows attackers to disrupt service on your Java applications, leading to potential data loss and severe downtime. Imagine being locked out of your own kitchen during a busy dinner rush — that's basically what a JVM crash feels like for your app!

Put simply

Think of it like a restaurant where the chef has a hidden ingredient that could make anyone sick — if the kitchen (your server) isn't prepared for it, a single order could ruin dinner for everyone! The flaw resides in the implementation of the AtomicReferenceArray class in Java, which fails to enforce the Object[] type, causing potential denial of service or revealing private data by bypassing the Java sandbox restrictions.

What to do

This vulnerability allows attackers to disrupt service on your Java applications, leading to potential data loss and severe downtime. Imagine being locked out of your own kitchen during a busy dinner rush — that's basically what a JVM crash feels like for your app! Immediately update your Java Runtime Environment to the latest version, which addresses this vulnerability. Ensure that all dependencies are properly configured and audit your applications for any potential misuse of the AtomicReferenceArray class. You've got this! By taking these steps, you’ll secure your environment and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.98189 · 99.9th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2012-06-08T02:55Z
KEV added
2022-03-03 · due 2022-03-24
Affected products (74)
ProductVersionsFixed in
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
sun/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
suse/linux_enterprise_desktopall versions—
suse/linux_enterprise_javaall versions—
suse/linux_enterprise_javaall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_software_development_kitall versions—
suse/linux_enterprise_software_development_kitall versions—
References (45)
http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx · [email protected]http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/ · [email protected]http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html · [email protected]http://marc.info/?l=bugtraq&m=133364885411663&w=2 · [email protected]http://marc.info/?l=bugtraq&m=133365109612558&w=2 · [email protected]http://marc.info/?l=bugtraq&m=133847939902305&w=2 · [email protected]http://marc.info/?l=bugtraq&m=134254866602253&w=2 · [email protected]http://marc.info/?l=bugtraq&m=134254957702612&w=2 · [email protected]http://rhn.redhat.com/errata/RHSA-2012-0508.html · [email protected]http://rhn.redhat.com/errata/RHSA-2012-0514.html · [email protected]http://rhn.redhat.com/errata/RHSA-2013-1455.html · [email protected]http://secunia.com/advisories/48589 · [email protected]http://secunia.com/advisories/48692 · [email protected]http://secunia.com/advisories/48915 · [email protected]http://secunia.com/advisories/48948 · [email protected]http://secunia.com/advisories/48950 · [email protected]http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3 · [email protected]http://www.debian.org/security/2012/dsa-2420 · [email protected]http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html · [email protected]http://www.securityfocus.com/bid/52161 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=788994 · [email protected]http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx · af854a3a-2127-422b-91ae-364da2661108http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/ · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=133364885411663&w=2 · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=133365109612558&w=2 · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=133847939902305&w=2 · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=134254866602253&w=2 · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=134254957702612&w=2 · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2012-0508.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2012-0514.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2013-1455.html · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48589 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48692 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48915 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48948 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48950 · af854a3a-2127-422b-91ae-364da2661108http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3 · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2012/dsa-2420 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/52161 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=788994 · af854a3a-2127-422b-91ae-364da2661108https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0507 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 24
    kev
  • 07 JUN 22:00Z
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33…
    cvelistv5