CVE-2012-2967
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
CVE-2012-2967 is a high vulnerability (CVSS 7.5) in Caucho Resin, published August 12, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in com.caucho:resin 4.0.29.
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
Exploit likelihood
What each source reports
NVD Score used
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
CVE-2012-2967- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
CVE-2012-2967- Updated
- 2026-11-02
EUVDEUVD-2012-2945 No score
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
EUVD-2012-2945- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2qr7-8fp8-4xxr No score
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
GHSA-2qr7-8fp8-4xxr- Updated
- 2026-11-02
OSVGHSA-2qr7-8fp8-4xxr No score
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
GHSA-2qr7-8fp8-4xxr- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
com.caucho:resinMaven |
before 4.0.29 | 4.0.29 |
com.caucho:resinMaven |
before 4.0.29, plus listed versions 3.0.9 |
4.0.29 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |