9.3

CVE-2012-4305

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue allows remote attackers to execute arbitrary code via vectors related to an "invalid type cast" and exposed native methods in the T2KGlyph class.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Javafx Version <= 2.2.4
Oracle ≫ Javafx Version2.0
Oracle ≫ Javafx Version2.0.2
Oracle ≫ Javafx Version2.0.3
Oracle ≫ Javafx Version2.1
Oracle ≫ Javafx Version2.2
Oracle ≫ Javafx Version2.2.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.71% 0.931
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=136733161405818&w=2
http://www.kb.cert.org/vuls/id/858729
US Government Resource
http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA13-032A.html
US Government Resource
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1030
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16392