CVE-2012-0507 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

provenance: imported · CVE: CVE-2012-0507

CVE-2012-0507: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Oracle
Product	Java SE
Date added	2022-03-03
Due date	2022-03-24
Ransomware campaign use	Known

Description

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2012-0507

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0507
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog