CVE-2012-0507
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
10.0 HighIn KEVPublic exploitFix available
CVE-2012-0507 is a high vulnerability (CVSS 10.0) in Oracle Java Se, published February 28, 2012. CISA lists it as known to be exploited, since March 3, 2022. EUVD reports exploitation since March 3, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 98.2%, the 99th percentile. Fixed in openjdk-6 6b18-1.8.13-0+squeeze1.
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
Exploit likelihood
98.2%Up 19.1 points since Feb 4, 2022
What each source reports
CVE List
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
- Record
CVE-2012-0507- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-843
- Updated
- 2026-11-02
EUVDEUVD-2012-0539
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
- Record
EUVD-2012-0539- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-43xj-964v-hcjf
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
- Record
GHSA-43xj-964v-hcjf- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-843
- Updated
- 2026-11-02
CISA KEV No score
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
- Record
CVE-2012-0507- Updated
- 2026-11-02
NVD
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
- Record
CVE-2012-0507- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-843
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-6Debian:6.0 |
before 6b18-1.8.13-0+squeeze1, plus listed versions 6b18-1.8.10-0+squeeze16b18-1.8.10-0+squeeze26b18-1.8.10-0~lenny16b18-1.8.10-0~lenny26b18-1.8.3-2 Show 12 moreShow less6b18-1.8.3-2+squeeze16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.16b18-1.8.9-0.1~squeeze1 |
6b18-1.8.13-0+squeeze1 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
Show 101 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.43.1.10.6.el6_2 | 1:1.6.0.0-1.43.1.10.6.el6_2 |
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.31-1jpp.1.el4 | 1:1.6.0.31-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.31-1jpp.1.el5 | 1:1.6.0.31-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.31-1jpp.1.el6_2 | 1:1.6.0.31-1jpp.1.el6_2 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.25.1.10.6.el5_8 | 1:1.6.0.0-1.25.1.10.6.el5_8 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.13.1-1jpp.1.el5 | 1:1.5.0.13.1-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:6 |
before 1:1.5.0.13.1-1jpp.2.el6_2 | 1:1.5.0.13.1-1jpp.2.el6_2 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.5.0.13.1-1jpp.2.el6_2 | 1:1.5.0.13.1-1jpp.2.el6_2 |
java-1.5.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.5.0.13.1-1jpp.2.el6_2 | 1:1.5.0.13.1-1jpp.2.el6_2 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.5.0.13.1-1jpp.2.el6_2 | 1:1.5.0.13.1-1jpp.2.el6_2 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.5.0.13.1-1jpp.2.el6_2 | 1:1.5.0.13.1-1jpp.2.el6_2 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.5.0.13.1-1jpp.2.el6_2 | 1:1.5.0.13.1-1jpp.2.el6_2 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.5.0.13.1-1jpp.2.el6_2 | 1:1.5.0.13.1-1jpp.2.el6_2 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.1-1jpp.1.el5 | 1:1.6.0.10.1-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.1-1jpp.5.el6_2 | 1:1.6.0.10.1-1jpp.5.el6_2 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Java AtomicReferenceArray Type Violation Vulnerability | 2012-02-14 |
| Exploit-DB | Java - AtomicReferenceArray Type Violation (Metasploit) | 2012-03-30 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | exploitation, exploits | |
| 2026-11-02 | created | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV |
References
marc.info?l=bugtraq&m=133847939902305&w=2
oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
secunia.com/advisories/48692
krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs
Show 194 moreShow less
weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3
lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html
rhn.redhat.com/errata/RHSA-2013-1455.html
blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx
debian.org/security/2012/dsa-2420
bugzilla.redhat.com/show_bug.cgi?id=788994
securityfocus.com/bid/52161
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0507
nvd.nist.gov/vuln/detail/CVE-2012-0507
github.com/advisories/GHSA-43xj-964v-hcjf
access.redhat.com/errata/RHSA-2012:0135
icedtea.classpath.org/hg/release/icedtea6-1.10/file/icedtea6-1.10.6/NEWS
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0135.json
cve.org/CVERecord?id=CVE-2011-3563
ibm.com/developerworks/java/jdk/alerts
xforce.iss.net/xforce/xfdb/78764
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
kb.cert.org/vuls/id/225657
This page doesn't list everything
Left out here: 490 references. The JSON record has them.