Oracle Java SE 7 < Update 7 Multiple Vulnerabilities
high Nessus Plugin ID 61681
Language:
Synopsis
The remote Windows host contains a programming platform that is affected by multiple vulnerabilities.Description
The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 7 and is, therefore, potentially affected the following vulnerabilities :- The 'getField' method in the 'sun.awt.SunToolkit class' provided by the bundled SunToolkit can be used to obtain any field of a class - even private fields.
This error can allow privilege escalation.
(CVE-2012-0547)
- Two unspecified remote code execution vulnerabilities exist related to the 'com.sun.beans.finder.ConstructorFinder' and 'com.sun.beans.finder.FieldFinder' methods. No further details have been provided. (CVE-2012-1682, CVE-2012-3136)
- The 'setField' method provided by the bundled SunToolkit can be used to execute a privileged operation and calls 'setAccessible(true)' on the returned field reference, allowing an attacker to disable any 'final' or 'private' directives and gain full control to run code in the Java virtual machine. (CVE-2012-4681)
Note that at least one of these vulnerabilities is currently being exploited in the wild.
Solution
Upgrade to JDK / JRE 7 Update 7 or later, and remove, if necessary, any affected versions.See Also
http://www.nessus.org/u?26d19d73
http://www.nessus.org/u?563cdce7
http://www.nessus.org/u?83fce915
https://www.oracle.com/technetwork/java/javase/7u7-relnotes-1835816.html
Plugin Details
Severity: High
ID: 61681
File Name: oracle_java7_update6.nasl
Version: 1.26
Type: local
Agent: windows
Family: Windows
Published: 8/27/2012
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent
Risk Information
VPR
Risk Factor: Critical
Score: 9.8
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Temporal Vector: E:H/RL:OF/RC:C
CVSS Score Source: CVE-2012-4681
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 8.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:oracle:jre, cpe:/a:oracle:jre
Required KB Items: SMB/Java/JRE/Installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/30/2012
Vulnerability Publication Date: 8/10/2012
CISA Known Exploited Dates: 3/24/2022
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Java 7 Applet Remote Code Execution)
Reference Information
CVE: CVE-2012-0547, CVE-2012-1682, CVE-2012-3136, CVE-2012-4681