Oracle Java SE JRE up to 7 Update 4 Deployment buffer overflow

VulDB: Oracle Java SE JRE up to 7 Update 4 Deployment buffer overflow

General

Oracle

scipID: 5550
Affected: Oracle Java SE JRE up to 7 Update 4
Published: 06/12/2012
Risk: critical
Entry: 87% complete
Created: 06/14/2012
Updated: 09/03/2012

Summary

A vulnerability classified as critical has been found in Oracle Java SE JRE up to 7 Update 4. Affected is an unknown function of the component Deployment. The manipulation with an unknown input leads to a buffer overflow vulnerability. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was published 06/12/2012 as bulletin. The advisory is shared for download at oracle.com. The public release has been coordinated with the vendor. This vulnerability is traded as CVE-2012-1721 since 03/16/2012. It is possible to launch the attack remotely. Technical details are unknown but a private exploit is available.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at oracle.com. A possible mitigation has been published immediately after the disclosure of the vulnerability. The vulnerability is also documented in the databases at OSVDB (82875) and Secunia (SA49472). Further details are available at support.apple.com.