CVE-2012-1533
CriticalPublic exploitJDK: unspecified vulnerability (Deployment)
Published Oct 16, 2012 · Updated Aug 6, 2024
Key Facts
Patch immediately- CVE-2012-1533 is a critical-severity vulnerability (CVSS 10.0 v2) affecting Jdk (Oracle), Jre (Oracle), openjdk-11-openj9 (chainguard) and 17 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 69% probability of exploitation in the next 30 days.
- Fixed versions are available, including java 1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3, java 1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9, java-1_6_0-ibm 1.6.0_sr15.0-0.5.1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v2
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS (30-day exploit likelihood)
69%
Higher than 99.3% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2012-1533 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159.
Affected Products
138 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| JdkOracle | 1.6.0-update22, 1.6.0-update23, 1.6.0-update24, 1.6.0-update25, 1.6.0-update26, 1.6.0-update27, 1.6.0-update29, 1.6.0-update30 | 1.6.0 |
| JreOracle | 1.6.0-update22, 1.6.0-update23, 1.6.0-update24, 1.6.0-update25, 1.6.0-update26, 1.6.0-update27, 1.6.0-update29, 1.6.0-update30 | 1.6.0 |
| openjdk-11-openj9chainguard | See advisory | 0.53.0-r0 |
| openjdk-17-openj9chainguard | See advisory | 0.53.0-r0 |
| openjdk-21-openj9chainguard | See advisory | 0.48.0-r2 |
Patched Releases
java
1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3, 1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9
java-1_6_0-ibm
1.6.0_sr15.0-0.5.1, 1.6.0_sr16.2-0.3.1
java-1_6_0-ibm-alsa
1.6.0_sr15.0-0.5.1, 1.6.0_sr16.0-0.3.1
java-1_6_0-ibm-devel
1.6.0_sr16.0-0.3.1, 1.6.0_sr16.2-0.3.1
java-1_6_0-ibm-fonts
1.6.0_sr15.0-0.5.1, 1.6.0_sr16.2-0.3.1
java-1_6_0-ibm-jdbc
1.6.0_sr15.0-0.5.1, 1.6.0_sr16.2-0.3.1
java-1_6_0-ibm-plugin
1.6.0_sr15.0-0.5.1, 1.6.0_sr16.2-0.3.1
java-1_7_0-ibm
1.7.0_sr6.0-0.7.1
java-1_7_0-ibm-alsa
1.7.0_sr6.0-0.7.1
java-1_7_0-ibm-devel
1.7.0_sr7.0-0.5.1
java-1_7_0-ibm-jdbc
1.7.0_sr6.0-0.7.1
java-1_7_0-ibm-plugin
1.7.0_sr6.0-0.7.1
openjdk-11-openj9
0.53.0-r0
openjdk-17-openj9
0.53.0-r0
openjdk-21-openj9
0.48.0-r2
openjdk-25-openj9
0.59.0-r1
openjdk-26-openj9
0.59.0-r1
openjdk-8-openj9
0.53.0-r1
Jdk
1.6.0, 1.7.0
Jre
1.6.0, 1.7.0
Timeline
Publicly disclosed
Oct 16, 2012
Last updated
Aug 6, 2024
References
- advisoryRHSA-2012:1391
- advisoryRHSA-2012:1392
- advisoryRHSA-2012:1466
- advisoryRHSA-2012:1467
- advisoryRHSA-2013:1455
FAQ
Common Questions.
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159.
Affected: Jdk (Oracle) versions 1.6.0-update22, 1.6.0-update23, 1.6.0-update24, 1.6.0-update25, 1.6.0-update26, 1.6.0-update27, 1.6.0-update29, 1.6.0-update30; Jre (Oracle) versions 1.6.0-update22, 1.6.0-update23, 1.6.0-update24, 1.6.0-update25, 1.6.0-update26, 1.6.0-update27, 1.6.0-update29, 1.6.0-update30; openjdk-11-openj9 (chainguard), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including java 1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3, java 1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9, java-1_6_0-ibm 1.6.0_sr15.0-0.5.1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2012-1533 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo