CVE-2012-0547 json
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and ear…
published 2012-08-30 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0579
- cvss
- 0.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 12.5%
- EPSS 12.5% chance of exploitation in 30 days, percentile 96%
- public exploits
- 1
- Exploit-DB
Summary
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited." NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "toolkit internals references."
Patch / fix
- java-1.6.0-ibm network satellite 5.5, network satellite 5.4 1:1.6.0.14.0-1jpp.1.el5_9
- java-1.6.0-ibm network satellite 5.5, network satellite 5.4 1:1.6.0.14.0-1jpp.1.el6_4
- java-1.6.0-ibm RHEL 5 EXTRAS 1:1.6.0.12.0-1jpp.1.el5_8
- java-1.6.0-ibm RHEL 6 EXTRAS 1:1.6.0.12.0-1jpp.1.el6_3
- java-1.6.0-ibm-src RHEL 5 EXTRAS 1:1.6.0.12.0-1jpp.1.el5_8
- java-1.6.0-ibm-src RHEL 6 EXTRAS 1:1.6.0.12.0-1jpp.1.el6_3
- java-1.6.0-ibm-demo RHEL 5 EXTRAS 1:1.6.0.12.0-1jpp.1.el5_8
- java-1.6.0-ibm-demo RHEL 6 EXTRAS 1:1.6.0.12.0-1jpp.1.el6_3
red hat advisories RHSA-2013:1456RHSA-2013:1455RHSA-2012:1466RHSA-2012:1392RHSA-2012:1289RHSA-2012:1222
- java-1_7_0-openjdk openSUSE Tumbleweed 1.7.0.121-1.1
opensuse advisories openSUSE-SU-2024:10534-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2012-0547 updated cvss 0.0
OpenJDK: AWT hardening fixes (AWT, 7163201)
-
Red Hat Enterprise Linux 5 java-1.7.0-ibm, java-1.7.0-oracle, java-1.7.0-openjdk, java-1.7.0-oracle-src, java-1.7.0-oracle-demo, java-1.7.0-oracle-jdbc, +2 moreaffected: no fix available
-
Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk 1.6.0.0-1.28.1.10.9.el5_8, java-1.6.0-openjdk-src 1.6.0.0-1.28.1.10.9.el5_8, java-1.6.0-openjdk-demo 1.6.0.0-1.28.1.10.9.el5_8, java-1.6.0-openjdk-javadoc 1.6.0.0-1.28.1.10.9.el5_8 Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk 1.6.0.0-1.28.1.10.9.el5_8, java-1.6.0-openjdk-src 1.6.0.0-1.28.1.10.9.el5_8, java-1.6.0-openjdk-demo 1.6.0.0-1.28.1.10.9.el5_8, java-1.6.0-openjdk-javadoc 1.6.0.0-1.28.1.10.9.el5_8fixed: vendor fix RHSA-2012:1222
-
Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk 1.6.0.0-1.49.1.11.4.el6_3 Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk 1.6.0.0-1.49.1.11.4.el6_3, java-1.7.0-openjdk-src 1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-demo 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk-src 1.6.0.0-1.49.1.11.4.el6_3, java-1.7.0-openjdk-javadoc 1.7.0.5-2.2.1.el6_3.3, +2 morefixed: vendor fix RHSA-2012:1221
-
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun 1.6.0.37-1jpp.1.el5_8, java-1.6.0-ibm 1.6.0.12.0-1jpp.1.el5_8, java-1.6.0-sun-src 1.6.0.37-1jpp.1.el5_8, java-1.6.0-sun-demo 1.6.0.37-1jpp.1.el5_8, java-1.6.0-sun-jdbc 1.6.0.37-1jpp.1.el5_8, java-1.6.0-ibm-src 1.6.0.12.0-1jpp.1.el5_8, +6 more Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-sun 1.6.0.37-1jpp.1.el6_3, java-1.7.0-ibm 1.7.0.2.0-1jpp.3.el6_3, java-1.6.0-ibm 1.6.0.12.0-1jpp.1.el6_3, java-1.7.0-oracle 1.7.0.7-1jpp.5.el6_3, java-1.6.0-sun-src 1.6.0.37-1jpp.1.el6_3, java-1.6.0-sun-demo 1.6.0.37-1jpp.1.el6_3, +14 morefixed: vendor fix RHSA-2012:1466
-
Red Hat Enterprise Linux HPC Node (v. 6) java-1.6.0-openjdk 1.6.0.0-1.49.1.11.4.el6_3 Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk 1.6.0.0-1.49.1.11.4.el6_3, java-1.7.0-openjdk-src 1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-demo 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk-src 1.6.0.0-1.49.1.11.4.el6_3, java-1.7.0-openjdk-javadoc 1.7.0.5-2.2.1.el6_3.3, +2 morefixed: vendor fix RHSA-2012:1221
-
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-sun 1.6.0.37-1jpp.1.el6_3, java-1.7.0-ibm 1.7.0.2.0-1jpp.3.el6_3, java-1.6.0-ibm 1.6.0.12.0-1jpp.1.el6_3, java-1.7.0-oracle 1.7.0.7-1jpp.5.el6_3, java-1.6.0-sun-src 1.6.0.37-1jpp.1.el6_3, java-1.6.0-sun-demo 1.6.0.37-1jpp.1.el6_3, +6 morefixed: vendor fix RHSA-2012:1466
-
Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk 1.6.0.0-1.49.1.11.4.el6_3, java-1.6.0-openjdk-javadoc 1.6.0.0-1.49.1.11.4.el6_3 Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk 1.6.0.0-1.49.1.11.4.el6_3, java-1.7.0-openjdk-src 1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-demo 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk-src 1.6.0.0-1.49.1.11.4.el6_3, java-1.7.0-openjdk-javadoc 1.7.0.5-2.2.1.el6_3.3, +1 morefixed: vendor fix RHSA-2012:1221
-
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun 1.6.0.37-1jpp.1.el5_8, java-1.6.0-ibm 1.6.0.12.0-1jpp.1.el5_8, java-1.6.0-sun-src 1.6.0.37-1jpp.1.el5_8, java-1.6.0-sun-demo 1.6.0.37-1jpp.1.el5_8, java-1.6.0-sun-jdbc 1.6.0.37-1jpp.1.el5_8, java-1.6.0-ibm-src 1.6.0.12.0-1jpp.1.el5_8, +6 more Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-sun 1.6.0.37-1jpp.1.el6_3, java-1.7.0-ibm 1.7.0.2.0-1jpp.3.el6_3, java-1.6.0-ibm 1.6.0.12.0-1jpp.1.el6_3, java-1.7.0-oracle 1.7.0.7-1jpp.5.el6_3, java-1.6.0-sun-src 1.6.0.37-1jpp.1.el6_3, java-1.6.0-sun-demo 1.6.0.37-1jpp.1.el6_3, +14 morefixed: vendor fix RHSA-2012:1466
show 5 moreshow fewer
-
Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk 1.6.0.0-1.49.1.11.4.el6_3, java-1.6.0-openjdk-javadoc 1.6.0.0-1.49.1.11.4.el6_3 Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk 1.6.0.0-1.49.1.11.4.el6_3, java-1.7.0-openjdk-src 1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-demo 1.7.0.5-2.2.1.el6_3.3, java-1.6.0-openjdk-src 1.6.0.0-1.49.1.11.4.el6_3, java-1.7.0-openjdk-javadoc 1.7.0.5-2.2.1.el6_3.3, +1 morefixed: vendor fix RHSA-2012:1221
-
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-sun 1.6.0.37-1jpp.1.el6_3, java-1.7.0-ibm 1.7.0.2.0-1jpp.3.el6_3, java-1.6.0-ibm 1.6.0.12.0-1jpp.1.el6_3, java-1.7.0-oracle 1.7.0.7-1jpp.5.el6_3, java-1.6.0-sun-src 1.6.0.37-1jpp.1.el6_3, java-1.6.0-sun-demo 1.6.0.37-1jpp.1.el6_3, +14 morefixed: vendor fix RHSA-2012:1466
-
Red Hat Satellite 5.4 (RHEL v.5) java-1.6.0-ibm 1.6.0.14.0-1jpp.1.el5_9 Red Hat Satellite 5.4 (RHEL v.6) java-1.6.0-ibm 1.6.0.14.0-1jpp.1.el6_4fixed: vendor fix RHSA-2013:1455
-
Red Hat Satellite 5.5 (RHEL v.5) java-1.6.0-ibm 1.6.0.14.0-1jpp.1.el5_9 Red Hat Satellite 5.5 (RHEL v.6) java-1.6.0-ibm 1.6.0.14.0-1jpp.1.el6_4fixed: vendor fix RHSA-2013:1456
-
Red Hat Enterprise Linux 5 java-1.5.0-ibm Red Hat Enterprise Linux 6 java-1.5.0-ibm, java-1.5.0-ibm-src, java-1.5.0-ibm-demo, java-1.5.0-ibm-jdbc, java-1.5.0-ibm-plugin, java-1.5.0-ibm-javacommnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- First public exploit (EDB-20865)
- Published
Exploit prediction
12.47% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-20865 Java 7 Applet - Remote Code Execution (Metasploit) remote, 2012-08-27
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 0.0 | AV:N/AC:L/Au:N/C:N/I:N/A:N |
References
-
marc.info
/?l=bugtraq&m=135161897205627&w=2
vendor-advisory
-
h20566.www2.hp.com
/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03533078
vendor-advisory
-
security.gentoo.org
/glsa/glsa-201406-32.xml
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2012-1222.html
vendor-advisory
-
ubuntu.com
/usn/USN-1553-1
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-09/msg00032.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2012-1466.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-09/msg00019.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2013-1455.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2012-1392.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2012-1225.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-09/msg00006.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2013-1456.html
vendor-advisory
-
oracle.com
/technetwork/topics/security/alert-cve-2012-4681-1835715.html
vendor-advisory
- hitachi.co.jp /Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html
-
secunia.com
/advisories/51141
third-party-advisory
-
securityfocus.com
/bid/55339
vdb-entry
-
secunia.com
/advisories/51327
third-party-advisory
-
secunia.com
/advisories/51044
third-party-advisory
Sources
- CVE List CVE-2012-0547
- NVD CVE-2012-0547
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.