Vulnerability in Oracle Jdk
CVE-2012-3174
Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114.
EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.
Affected products
- Oracle Jdk — versions 1.7.0
- Oracle Jre — versions 1.7.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
- secalert_us@oracle.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert_us@oracle.com (x_refsource_MISC)
- secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
- secalert_us@oracle.com (x_refsource_UBUNTU, vendor-advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2012-3174?
- CVE-2012-3174 is a vulnerability in Oracle Jdk, classified under CWE-264. Published 2013-01-14.
- Is CVE-2012-3174 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.