CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2012-06-07
Oracle Java JRE AtomicReferenceArray Type Confusion Sandbox Bypass and Remote Code Execution (CVE-2012-0507)
[Affected Scope] Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier
[Impact] Remote attackers can completely bypass the JVM sandbox restrictions to execute arbitrary OS commands or cause a denial of service (JVM crash) via a specially crafted Java applet
[Mitigation] Immediately upgrade to patched Java versions (Java 7 Update 3, Java 6 Update 31 or higher) and disable Java browser plugins in legacy environments