CVE-2012-4681

critical-risk
Published 2012-08-28

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

Do I need to act?

!
94.1% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
1 public exploit available
20865
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (20)

Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jdk
Jre
Jre
Jre
Jre
Jre
Jre

Affected Vendors

Oracle Redhat

References (27)

Third Party Advisory http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html
Exploit http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.ht...
Broken Link http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wi...
Mailing List http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
Issue Tracking http://marc.info/?l=bugtraq&m=135109152819176&w=2
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-1225.html
Not Applicable http://secunia.com/advisories/51044
Broken Link http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html
Vendor Advisory http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.ht...
Broken Link http://www.securityfocus.com/bid/55213
Third Party Advisory http://www.us-cert.gov/cas/techalerts/TA12-240A.html
Broken Link https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the...
Third Party Advisory http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html
Exploit http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.ht...
Broken Link http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wi...
Mailing List http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
Issue Tracking http://marc.info/?l=bugtraq&m=135109152819176&w=2
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-1225.html
and 7 more references
Get this data via API
curl -H "Authorization: Bearer YOUR_KEY" \
  https://cyber.phasetransitions.ai/api/v1/cves/CVE-2012-4681
Free tier: 100 requests/day, no credit card.
95
/ 100
critical-risk
Severity 32/34 · Critical
Exploitability 34/34 · Critical
Exposure 29/34 · Critical