CVE-2012-2967
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
CVE-2012-2967 is a high vulnerability (CVSS 7.5) in Caucho Resin, published August 12, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in com.caucho:resin 4.0.29.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.62%EPSS, 76th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
4.0.29com.caucho:resin +1 more
Description
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
com.caucho:resinMaven | before 4.0.29 | 4.0.29 |
com.caucho:resinMaven | before 4.0.29, plus listed versions 3.0.9 | 4.0.29 |
What each source reports
NVD Score used
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
CVE-2012-2967- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
CVE-2012-2967- Updated
- 2026-11-02
EUVDEUVD-2012-2945No score
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
EUVD-2012-2945- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2qr7-8fp8-4xxrNo score
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
GHSA-2qr7-8fp8-4xxr- Updated
- 2026-11-02
OSVGHSA-2qr7-8fp8-4xxrNo score
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- Record
GHSA-2qr7-8fp8-4xxr- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.