Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.15.0-1jpp.1.el6_3 | RHSA-2012:1465 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.12.0-1jpp.1.el6_3 | RHSA-2012:1466 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.37-1jpp.1.el6_3 | RHSA-2012:1392 |
| RHEL 6 | java-1.7.0-ibm +5 | 1:1.7.0.3.0-1jpp.2.el6_3 | RHSA-2012:1467 |
| RHEL 6 | java-1.7.0-oracle +5 | 1:1.7.0.9-1jpp.3.el6_3 | RHSA-2012:1391 |
| RHEL 5 | java-1.4.2-ibm +6 | 1.4.2.13.14-1jpp.1.el5_8 | RHSA-2012:1485 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.15.0-1jpp.1.el5_8 | RHSA-2012:1465 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.12.0-1jpp.1.el5_8 | RHSA-2012:1466 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.37-1jpp.1.el5_8 | RHSA-2012:1392 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.14.0-1jpp.1.el5_9 | RHSA-2013:1456, RHSA-2013:1455 |
Advisories 8
- RHSA-2013:1455 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:1456 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:1467 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:1485 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:1466 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:1465 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:1391 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:1392 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 51313 third-party-advisory
- SUSE-SU-2012:1398 vendor-advisory
- oval:org.mitre.oval:def:16544 vdb-entry signature
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html
- 56025 vdb-entry
- RHSA-2012:1466 vendor-advisory
- 51315 third-party-advisory
- 51438 third-party-advisory
- 51141 third-party-advisory
- SSRT101043 vendor-advisory
- SUSE-SU-2012:1490 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21621154
- javaruntimeenvironment-2d-cve20125083(79412) vdb-entry
- RHSA-2013:1455 vendor-advisory
- RHSA-2012:1391 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21620037
- 51390 third-party-advisory
- RHSA-2012:1392 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21631786
- SUSE-SU-2012:1489 vendor-advisory
- SUSE-SU-2012:1595 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21616490
- 51327 third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
- RHSA-2012:1467 vendor-advisory
- RHSA-2012:1465 vendor-advisory
- 51328 third-party-advisory
- SSRT101042 vendor-advisory
- RHSA-2013:1456 vendor-advisory
- 51393 third-party-advisory
- http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
- 51326 third-party-advisory
- MDVSA-2013:150 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21625794
- http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf