CVE-2012-0504

2012-02-1500:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.011

Percentile

84.3%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier,
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Install and the Java Update
mechanism.

Notes

Author	Note
mdeslaur	in natty+, NetX and the plugin moved to the icedtea-web package
sbeattie	not included in upstream icedtea 6 notes, so assumed to affect sun-jav6 only