CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2012-06-16
Oracle Java SE Hotspot Type Confusion Remote Code Execution Vulnerability (CVE-2012-1723) Technical Advisory
[Affected Scope] Oracle Java SE 7 Update 4 and earlier, 6 Update 32 and earlier, 5.0 Update 35 and earlier, and SDK 1.4.2_37 and earlier
[Impact] Remote attackers can bypass the Java sandbox environment and execute arbitrary code with the privileges of the running user via malicious Java Applets
[Mitigation] Immediately upgrade to the latest secure Java SE release, disable Java browser plugins, and restrict access to legacy Java environments