Oracle Java Runtime Environment Remote Code Execution Vulnerability

Bugtraq ID:	55213
Class:	Unknown
CVE:	CVE-2012-4681
Remote:	Yes
Local:	No
Published:	Aug 27 2012 12:00AM
Updated:	Aug 03 2017 11:09AM
Credit:	Adam Gowdiak of Security Explorations and James Forshaw (tyranid) via TippingPoint
Vulnerable:	VMWare Vcenter Update Manager 5.1 VMWare Vcenter Update Manager 5.0 VMWare vCenter Server 5.0 VMWare vCenter Server 4.1 VMWare ESX 4.1 SuSE SUSE Linux Enterprise Server for VMware 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Java 11 SP2 SuSE Linux Enterprise Software Development Kit 11 SP2 Schneider-Electric Trio TView Software 3.27.0 Redhat Enterprise Linux Workstation Supplementary 6 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Supplementary 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Supplementary 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop Supplementary 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Oracle JRE 1.7 Update 6 Oracle JRE 1.6.0 Update 34 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 OpenJDK OpenJDK 0 OpenJDK jre 1.7 IcedTea IcedTea 2.3.0 IcedTea IcedTea 2.2 IcedTea IcedTea 2.1 IBM Java SE 7 SR1 IBM Java SDK 7 SR1 HP JDK and JRE 7.0.2 HP HP-UX B.11.31 Gentoo Linux Avaya Proactive Contact 5.0 Avaya Messaging Application Server 5.0 Avaya Meeting Exchange 5.0 Avaya IQ 5 Avaya IQ 4.0 Avaya IP Office Application Server 8.0 Avaya Call Management System R16.3 Avaya Call Management System R16.2 Avaya Call Management System R16.1 Avaya Call Management System R 16 Avaya Call Management System R 15 Avaya Aura System Manager 6.0 Avaya Aura SIP Enablement Services 5.0 Avaya Aura Presence Services 6.0 Avaya Aura Messaging 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Communication Manager Utility Services 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager 6.2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager 6.0.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager 5.2.1 SP2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Application Server 5300 SIP Core 3.0 Avaya Aura Application Server 5300 SIP Core 2.0
Not Vulnerable:	VMWare vCenter Server 5.1 Update 1 VMWare Update Manager 5.1 Update 1 Schneider-Electric Trio TView Software 3.29.0 Oracle JRE 1.7 Update 7 Oracle JRE 1.6.0 Update 35 IcedTea IcedTea 2.3.1 IBM Java SE 7 SR2 IBM Java SDK 7 SR2 HP JDK and JRE 7.0.3

Oracle Java Runtime Environment Remote Code Execution Vulnerability

Oracle Java Runtime Environment (JRE) is prone to a remote code execution vulnerability.

An attacker can exploit this issue to bypass Java sandbox restrictions and load additional classes to execute arbitrary code in the context of the application.

This vulnerability affects Oracle JRE 1.7.0 Update 6; prior versions may also be affected.

Oracle Java Runtime Environment Remote Code Execution Vulnerability

The issue is being exploited in limited targeted attacks.

The following exploits are available:

• /data/vulnerabilities/exploits/55213.java
• /data/vulnerabilities/exploits/55213.rb
• /data/vulnerabilities/exploits/55213.java
• /data/vulnerabilities/exploits/55213.rb

Oracle Java Runtime Environment Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Oracle Java Runtime Environment Remote Code Execution Vulnerability

References:

• [SECURITY] IcedTea 2.3.1 Released! (IcedTea)
  
• beans Statement package accessibility checks (OpenJDK)
  
• Java Homepage (Sun)
  
• Oracle Critical Patch Updates (CPUs) and Synchronized Security Releases (SSRs) (IBM)
  
• Oracle Critical Security Alert for CVE-2012-4681 (Avaya)
  
• Oracle Java Homepage (Oracle)
  
• Zero-Day Season is Not Over Yet (FireEye)
  
• Advisory (ICSA-17-213-02) Schneider Electric Trio TView (CERT)
  
• HPSBUX02824 SSRT100970 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary (HP)
  
• Oracle Security Alert for CVE-2012-4681 (Oracle)
  
• VMSA-2013-0006 VMware security updates for vCenter Server (VMware)
  
• Vulnerability Note VU#636312 Oracle Java JRE 1.7 allows untrusted code to set ar (US-CERT)