« Volver al listado

CVE-2012-1720

Estado: ModificadaBaja (3.7)—

Vulnerabilidad no especificada en el Java Runtime Environment (JRE), componente de Oracle Java SE 7 Update 4 y anteriores, 6 Update 32 y anteriores, 5 actualización 35 y anteriores, y v1.4.2_37 y anteriores, cuando se ejecutan en Solaris, permite a los usuarios locales a afectar confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con la red.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Oracle — JDKOracle — JRESUN — JDKSUN — JRE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-1720",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.7,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 1.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert_us@oracle.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-06-16T21:55:03.373",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=134496371727681&w=2",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://secunia.com/advisories/51080",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21615246",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/53956",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16581",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=134496371727681&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/51080",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21615246",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/53956",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16581",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el Java Runtime Environment (JRE), componente de Oracle Java SE 7 Update 4 y anteriores, 6 Update 32 y anteriores, 5 actualización 35 y anteriores, y v1.4.2_37 y anteriores, cuando se ejecutan en Solaris, permite a los usuarios locales a afectar confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con la red."
    }
  ],
  "lastModified": "2026-06-16T23:40:10.370",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:jdk:*:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D3162C7-575B-4AD4-B923-C97F5706349B",
              "versionEndIncluding": "1.7.0"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:*:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "404F6D28-CCE9-4767-8734-544274B4D086",
              "versionEndIncluding": "1.7.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:jdk:*:update32:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "574A7ACD-243A-4136-AB02-B89EA97C884F",
              "versionEndIncluding": "1.6.0"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:*:update32:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "179867A2-8221-4B8C-A04C-35FBA8EB07D5",
              "versionEndIncluding": "1.6.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:jdk:*:update35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "222B2736-EBC3-400D-80BB-70464203A8BF",
              "versionEndIncluding": "1.5.0"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:*:update35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "677FED6F-DDA1-45F7-900E-B98FECE04F7A",
              "versionEndIncluding": "1.5.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4DD9946E-3467-4D83-BB5B-E31AF6958EB5",
              "versionEndIncluding": "1.4.2_37"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A452D1C-3C17-41D4-A930-34277A27A711",
              "versionEndIncluding": "1.4.2_37"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com"
}