CVE-2012-0500
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
10.0 HighPublic exploit
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Exploit likelihood
58.0%Down 25.2 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
- Record
CVE-2012-0500- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
- Record
CVE-2012-0500- Updated
- 2026-11-02
EUVDEUVD-2012-0532 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
- Record
EUVD-2012-0532- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5845-68q3-8r26 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
- Record
GHSA-5845-68q3-8r26- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 From an advisory covering 158 CVEs |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 From an advisory covering 158 CVEs |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 From an advisory covering 158 CVEs |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 From an advisory covering 158 CVEs |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Sun Java Web Start Plugin Command Line Argument Injection | 2012-02-14 |
| Exploit-DB | Sun Java Web Start Plugin - Command Line Argument Injection (2012) (Metasploit) | 2012-02-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0500 is a high vulnerability (CVSS 10.0) in Oracle Javafx, published February 15, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 58.0%, the 99th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=133847939902305&w=2
oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
secunia.com/advisories/48589
securityfocus.com/bid/52015
rhn.redhat.com/errata/RHSA-2013-1455.html
Show 194 moreShow less
lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14844
nvd.nist.gov/vuln/detail/CVE-2012-0500
github.com/advisories/GHSA-5845-68q3-8r26
access.redhat.com/errata/RHSA-2012:0139
bugzilla.redhat.com/show_bug.cgi?id=788606
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0139.json
cve.org/CVERecord?id=CVE-2011-3563
cisa.gov/known-exploited-vulnerabilities-catalog
ibm.com/developerworks/java/jdk/alerts
xforce.iss.net/xforce/xfdb/78764
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
kb.cert.org/vuls/id/225657
This page doesn't list everything
Left out here: 474 references. The JSON record has them.