Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited." NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "toolkit internals references."
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.6.0.35 | Sep 16, 2012 | Aug 30, 2012 |
| Centos_linux | — | Upgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-devel | Dec 1, 2016 | Aug 30, 2012 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/oracle-jre-bin.Upgrade dev-java/sun-jdk.Upgrade dev-java/icedtea-bin. | Oct 30, 2017 | Aug 30, 2012 |
| Hpux | — | Update Jdk70.JDK70-IPF32 to the latest versionUpdate Jdk70.JDK70-COM to the latest versionUpdate Jre70.JRE70-IPF64-HS to the latest versionUpdate Jre70.JRE70 to the latest versionUpdate Jre70.JRE70-IPF32-HS to the latest versionUpdate Jdk70.JDK70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF64 to the latest versionUpdate Jre70.JRE70-COM to the latest versionUpdate Jre70.JRE70-IPF32 to the latest versionUpdate Jdk70.JDK70 to the latest versionUpdate Jdk70.JDK70-DEMO to the latest version | Aug 11, 2017 | Aug 30, 2012 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Aug 31, 2012 | Aug 30, 2012 |
| Oracle_linux | — | Upgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-demo | Oct 16, 2024 | Aug 30, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 30, 2012 |
| Suse | — | Upgrade java-1_6_0-openjdk-develUpgrade java-1_7_0-ibmUpgrade java-1_6_0-openjdk-demoUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_6_0-openjdkUpgrade java-1_7_0-ibm-develUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_7_0-openjdk-demoUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-ibm-alsa | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jre-headlessUpgrade openjdk-6-jreUpgrade openjdk-6-jre-zeroUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-jre-lib | Nov 8, 2024 | Aug 30, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub