Oracle Java SE CVE-2012-5088 Remote Java Runtime Environment Vulnerability

Bugtraq ID:	56057
Class:	Unknown
CVE:	CVE-2012-5088
Remote:	Yes
Local:	No
Published:	Oct 16 2012 12:00AM
Updated:	May 07 2015 05:07PM
Credit:	Oracle
Vulnerable:	VMWare VirtualCenter 2.5 VMWare Vcenter Update Manager 5.1 VMWare Vcenter Update Manager 5.0 VMWare vCenter Server 5.0 VMWare vCenter Server 4.1 VMWare vCenter Server 4.0 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESX 3.5 SuSE SUSE Linux Enterprise Software Development Kit 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server for VMware 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Java 11 SP2 Sun JRE (Windows Production Release) 1.7 Sun JRE (Solaris Production Release) 1.7 Sun JRE (Linux Production Release) 1.7 S.u.S.E. openSUSE 12.2 Redhat Enterprise Linux Workstation Supplementary 6 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Server Supplementary 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Supplementary 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Oracle Solaris 11.1 Oracle JRE (Windows Production Release) 1.7.0_7 Oracle JRE (Windows Production Release) 1.7.0_4 Oracle JRE (Windows Production Release) 1.7.0_2 Oracle JRE (Solaris Production Release) 1.7.0_7 Oracle JRE (Solaris Production Release) 1.7.0_4 Oracle JRE (Solaris Production Release) 1.7.0_2 Oracle JRE (Linux Production Release) 1.7.0_7 Oracle JRE (Linux Production Release) 1.7.0_4 Oracle JRE (Linux Production Release) 1.7.0_2 Oracle JDK (Windows Production Release) 1.7 Oracle JDK (Windows Production Release) 1.7.0_7 Oracle JDK (Windows Production Release) 1.7.0_4 Oracle JDK (Windows Production Release) 1.7.0_2 Oracle JDK (Solaris Production Release) 1.7 Oracle JDK (Solaris Production Release) 1.7.0_7 Oracle JDK (Solaris Production Release) 1.7.0_4 Oracle JDK (Solaris Production Release) 1.7.0_2 Oracle JDK (Linux Production Release) 1.7 Oracle JDK (Linux Production Release) 1.7.0_7 Oracle JDK (Linux Production Release) 1.7.0_4 Oracle JDK (Linux Production Release) 1.7.0_2 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 OpenJDK OpenJDK 7 OpenJDK OpenJDK 6 IcedTea IcedTea 2.3.2 IcedTea IcedTea 2.2.2 IcedTea IcedTea 2.1.2 IBM Rational Service Tester 8.3 IBM Rational Performance Tester 8.3 IBM Rational Host On-Demand 11.0 IBM Rational Host On-Demand 11.0.6.1 IBM Rational Functional Tester 8.3 IBM Rational Functional Tester 8.0 IBM Rational Build Forge 7.1.3 5 IBM Rational Build Forge 7.1.3 4 IBM Rational Build Forge 7.1.3 3 IBM Rational Build Forge 7.1.3 2 IBM Rational Build Forge 7.1.3 1 IBM Rational Build Forge 7.1.3 IBM Rational Build Forge 7.1.2 3 IBM Rational Build Forge 7.1.2 2 IBM Rational Build Forge 7.1.2 1 IBM Rational Build Forge 7.1.2 IBM Rational Build Forge 7.1.1 4 Gentoo Linux
Not Vulnerable:	VMWare vCenter Server 5.1 Update 1 VMWare Update Manager 5.1 Update 1 IcedTea IcedTea 2.3.3 IcedTea IcedTea 2.2.3 IcedTea IcedTea 2.1.3 IBM Rational Service Tester 8.3.0.1 IBM Rational Performance Tester 8.3.0.1 IBM Rational Host On-Demand 11.0.7 IBM Rational Functional Tester 8.3.0.1 IBM Rational Build Forge 8.0

Oracle Java SE CVE-2012-5088 Remote Java Runtime Environment Vulnerability

Oracle Java SE is prone to a remote vulnerability in Java Runtime Environment.

The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component.

This vulnerability affects the following supported versions:
7 Update 7

Oracle Java SE CVE-2012-5088 Remote Java Runtime Environment Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/56057.rb.txt

Oracle Java SE CVE-2012-5088 Remote Java Runtime Environment Vulnerability

Solution:
Updates are available. Please see the references for more information.

Oracle Java SE CVE-2012-5088 Remote Java Runtime Environment Vulnerability

References:

• [SECURITY] IcedTea 2.1.3, 2.2.3 & 2.3.3 for OpenJDK7 Released! (IcedTea)
  
• Multiple vulnerabilities fixed in Java 7U9 (Oracle)
  
• Oracle Homepage (Oracle)
  
• Vulnerabilities in Rational Functional Tester versions 8.x (IBM)
  
• Oracle Java SE Critical Patch Update Advisory - October 2012 (Oracle)
  
• Rational Performance Tester: Security Vulnerabilities (IBM)
  
• Rational Service Tester: Security Vulnerabilities (IBM)
  
• Security Bulletin: IBM Rational Build Forge Java ( CVE-2012-3216, CVE-2012-5077, (IBM)
  
• Security Bulletin: Potential security vulnerabilities in Rational Host On-Demand (IBM)
  
• Security Bulletin: Vulnerabilities in Rational Functional Tester versions 8.x du (IBM)
  
• VMSA-2013-0003: VMware vCenter Server, ESXi and ESX security issues (VMware)
  
• VMSA-2013-0006 VMware security updates for vCenter Server (VMware)