Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install and the Java Update mechanism.

The remote host is affected by the vulnerability described in GLSA-201401-30 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in the Oracle Java       implementation. Please review the CVE identifiers referenced below for       details.
  Impact :

    An unauthenticated, remote attacker could exploit these vulnerabilities       to execute arbitrary code.
      Furthermore, a local or remote attacker could exploit these       vulnerabilities to cause unspecified impact, possibly including remote       execution of arbitrary code.
  Workaround :

    There is no known workaround at this time.

The version of VMware vCenter installed on the remote host is 4.0 earlier than Update 4a, 4.1 earlier than Update 3, or 5.0 earlier than Update 2.  As such, it is potentially affected by multiple vulnerabilities in the included Oracle (Sun) Java Runtime Environment.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 3 / 6 Update 31 / 5.0 Update 34 / 1.4.2_36 and is, therefore, potentially affected by security issues in the following components :

  - 2D
  - AWT
  - CORBA
  - Concurrency
  - Deployment
  - I18n
  - Install
  - Java Runtime Environment
  - Lightweight HTTP Server
  - Serialization
  - Sound

ID	Name	Product	Family	Severity
72139	GLSA-201401-30 : Oracle JRE/JDK: Multiple vulnerabilities (ROBOT)	Nessus	Gentoo Local Security Checks	critical
66806	VMware vCenter Multiple Vulnerabilities (VMSA-2012-0013)	Nessus	Misc.	critical
64847	Oracle Java SE Multiple Vulnerabilities (February 2012 CPU) (Unix)	Nessus	Misc.	critical
57959	Oracle Java SE Multiple Vulnerabilities (February 2012 CPU)	Nessus	Windows	critical

Detections

Analytics

CVE-2012-0504

critical

Tenable Plugins

critical

critical

critical

critical