CVE-2012-1533 : Unspecified vulnerability in the Java Runtime Environment (JRE) component in Ora

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159.

Published 2012-10-16 21:55:01

Updated 2025-04-11 00:51:22

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2012-1533

SUN » JDK » Version: 1.6.0 Update Update1
cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update2
cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 4
cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 3
cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 7
cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 10
cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 5
cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 6
cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 11
cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update1 B06
cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 12
cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 13
cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 16
cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 14
cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 15
cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 17
cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 18
cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update 19
cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0.200 Update Update20
cpe:2.3:a:sun:jdk:1.6.0.200:update20:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0.210 Update Update21
cpe:2.3:a:sun:jdk:1.6.0.210:update21:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 1
cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 2
cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0
cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 4
cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 3
cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 10
cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 5
cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 6
cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 7
cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 11
cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 12
cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 13
cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 15
cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 14
cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 16
cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 17
cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 18
cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 19
cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 20
cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 21
cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*
Matching versions
Oracle » JDK » Update Update35
Versions up to, including, (<=) 1.6.0
cpe:2.3:a:oracle:jdk:*:update35:*:*:*:*:*:*
Matching versions
Oracle » JDK » Update Update7
Versions up to, including, (<=) 1.7.0
cpe:2.3:a:oracle:jdk:*:update7:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0
cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update1
cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update2
cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update5
cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update6
cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update3
cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update4
cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update32
cpe:2.3:a:oracle:jdk:1.6.0:update32:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update31
cpe:2.3:a:oracle:jdk:1.6.0:update31:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update23
cpe:2.3:a:oracle:jdk:1.6.0:update23:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update22
cpe:2.3:a:oracle:jdk:1.6.0:update22:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update29
cpe:2.3:a:oracle:jdk:1.6.0:update29:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update33
cpe:2.3:a:oracle:jdk:1.6.0:update33:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update25
cpe:2.3:a:oracle:jdk:1.6.0:update25:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update24
cpe:2.3:a:oracle:jdk:1.6.0:update24:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update27
cpe:2.3:a:oracle:jdk:1.6.0:update27:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update30
cpe:2.3:a:oracle:jdk:1.6.0:update30:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update34
cpe:2.3:a:oracle:jdk:1.6.0:update34:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update26
cpe:2.3:a:oracle:jdk:1.6.0:update26:*:*:*:*:*:*
Matching versions
Oracle » JRE » Update Update35
Versions up to, including, (<=) 1.6.0
cpe:2.3:a:oracle:jre:*:update35:*:*:*:*:*:*
Matching versions
Oracle » JRE » Update Update7
Versions up to, including, (<=) 1.7.0
cpe:2.3:a:oracle:jre:*:update7:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0
cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update1
cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update4
cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update5
cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update2
cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update3
cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update6
cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update30
cpe:2.3:a:oracle:jre:1.6.0:update30:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update33
cpe:2.3:a:oracle:jre:1.6.0:update33:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update32
cpe:2.3:a:oracle:jre:1.6.0:update32:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update24
cpe:2.3:a:oracle:jre:1.6.0:update24:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update25
cpe:2.3:a:oracle:jre:1.6.0:update25:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update31
cpe:2.3:a:oracle:jre:1.6.0:update31:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update22
cpe:2.3:a:oracle:jre:1.6.0:update22:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update29
cpe:2.3:a:oracle:jre:1.6.0:update29:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update27
cpe:2.3:a:oracle:jre:1.6.0:update27:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update23
cpe:2.3:a:oracle:jre:1.6.0:update23:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update34
cpe:2.3:a:oracle:jre:1.6.0:update34:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update26
cpe:2.3:a:oracle:jre:1.6.0:update26:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2012-1533

Top countries where our scanners detected CVE-2012-1533

Top open port discovered on systems with this issue 80

IPs affected by CVE-2012-1533 1,688

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2012-1533!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2012-1533

EPSS FAQ

66.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2012-1533

Sun Java Web Start Double Quote Injection

Disclosure Date: 2012-10-16

First seen: 2020-04-26

exploit/windows/browser/java_ws_double_quote

This module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. Parameters initial-heap-size and max-heap-size in a JNLP file can contain a double quote which is not properly sanitized when creating the command line for javaw.exe. This a

More information

CVSS scores for CVE-2012-1533

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2012-1533

http://rhn.redhat.com/errata/RHSA-2012-1391.html

RHSA-2012:1391 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://www.securityfocus.com/bid/56046

Oracle Java SE CVE-2012-1533 Remote Code Execution Vulnerability
http://www-01.ibm.com/support/docview.wss?uid=swg21620037

IBM notice: The page you requested cannot be displayed

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html

[security-announce] SUSE-SU-2012:1595-1: important: Security update for

CVEs referencing this url
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

CVEs referencing this url
http://marc.info/?l=bugtraq&m=135758563611658&w=2

'[security bulletin] HPSBOV02833 SSRT101043 rev.1 - OpenVMS running Java on Integrity Servers, Remote' - MARC

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html

[security-announce] SUSE-SU-2012:1398-1: important: Security update for

CVEs referencing this url
http://secunia.com/advisories/51390

Sign in

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16648

Repository / Oval Repository
https://exchange.xforce.ibmcloud.com/vulnerabilities/79416

Oracle Java Runtime Environment Deployment unspecified CVE-2012-1533 Vulnerability Report
http://rhn.redhat.com/errata/RHSA-2013-1455.html

RHSA-2013:1455 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html

Oracle Java Critical Patch Update - October 2012
Patch;Vendor Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21616490

IBM Security Bulletin: IBM Tivoli Monitoring clients affected by vulnerabilities in IBM JRE excuted under a security manager.

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2013-1456.html

RHSA-2013:1456 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://secunia.com/advisories/51438

Sign in

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2012-1467.html

RHSA-2012:1467 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2012-1466.html

RHSA-2012:1466 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21621154

IBM notice: The page you requested cannot be displayed

CVEs referencing this url
http://secunia.com/advisories/51326

Sign in

CVEs referencing this url
http://secunia.com/advisories/51327

Sign in

CVEs referencing this url
http://marc.info/?l=bugtraq&m=135542848327757&w=2

'[security bulletin] HPSBUX02832 SSRT101042 rev.1 - HP-UX Running Java, Remote Unauthorized Access, D' - MARC

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2012-1392.html

RHSA-2012:1392 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2012-1533