{"id":"CVE-2012-0507","kind":"vulnerability","aliases":["CVE-2012-0507"],"related":[],"title":"Oracle Java SE: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency.  NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions.  NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.","summary":"Oracle's Java Runtime Environment has an incorrect type flaw in its Concurrency component that lets a remote attacker run arbitrary code. CISA lists it as actively exploited and it is tagged ransomware-related in the catalog.","severity":"critical","cvss":10.0,"epss":0.98189,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Oracle Java SE","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browsers","desktop","exploited","java","oracle-jre","ransomware","runtime"],"not_affected_if":["headless-server-without-jre","java-not-installed"],"how_to_check":"Run 'java -version' on each host and check the installed JRE/JDK build against Oracle's update list; unknown for a specific vulnerable build range.","fix":"Update the Oracle Java SE runtime to a current, vendor-supported release per Oracle's instructions (CISA required action: apply updates per vendor instructions).","status":"open","published_at":"2012-06-07T22:55:17+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:26:08+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-23T21:26:08Z","model":"claude-haiku-5-5","output":{"fix":"Update the Oracle Java SE runtime to a current, vendor-supported release per Oracle's instructions (CISA required action: apply updates per vendor instructions).","reach":"internet","impact":"high","summary":"Oracle's Java Runtime Environment has an incorrect type flaw in its Concurrency component that lets a remote attacker run arbitrary code. CISA lists it as actively exploited and it is tagged ransomware-related in the catalog.","category":"runtime","who_cares":["java","oracle-jre","desktop","browsers"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code remotely on the machine running the Java runtime.","analyst_note":"Confirm affected and fixed Java SE versions and the exploitation vector (e.g. applet/browser) from Oracle's advisory and the NVD entry for CVE-2012-0507.","how_to_check":"Run 'java -version' on each host and check the installed JRE/JDK build against Oracle's update list; unknown for a specific vulnerable build range.","needs_analyst":true,"not_affected_if":["java-not-installed","headless-server-without-jre"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000506,"input_tokens":2853,"output_tokens":442,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0507':16A,19A '-2011':184C '-2012':15A,18A '-3571':185C '2':85C '2012':123C '30':90C '33':96C '5.0':94C '6':88C '7':83C 'activ':58B 'affect':103C 'allow':99C,161C 'alreadi':190C 'arbitrari':10A,52B 'array':154C 'assign':191C 'atomicreferencearray':146C 'attack':50B,101C,162C 'avail':107C 'browser':23B 'bypass':172C 'catalog':69B 'caus':164C 'cisa':54B 'claim':131C 'class':147C 'code':11A,53B 'comment':129C 'compon':45B,78C 'concurr':44B,113C 'confidenti':104C 'cpu':125C 'crash':170C 'cve':14A,17A,183C 'denial':166C 'desktop':24B 'differ':194C 'downstream':134C 'earlier':87C,92C,98C 'ensur':151C 'environ':8A,36B,76C 'execut':12A 'exploit':25B,59B 'februari':122C 'flaw':41B 'identifi':188C 'implement':148C 'incorrect':39B 'inform':117C 'integr':105C 'issu':142C,178C,195C 'java':2A,5A,21A,26B,34B,74C,81C,173C 'jre':9A,29B,77C 'jvm':169C 'let':47B 'list':55B 'map':181C 'note':114C,176C 'object':158C 'obtain':119C 'occur':143C 'oracl':1A,4A,28B,32B,80C,124C,126C 'oracle':20A 'oracle-jr':27B 'origin':180C 'parti':138C 'previous':116C 'ransomwar':30B,65B 'ransomware-rel':64B 'relat':66B,111C 'remot':49B,100C 'research':139C 'restrict':175C 'run':51B 'runtim':7A,31B,35B,75C 'sandbox':174C 'se':3A,6A,22A,82C 'servic':168C 'tag':63B 'third':137C 'type':40B,159C 'unknown':109C 'unspecifi':70C 'updat':84C,89C,95C 'vector':110C 'vendor':135C 'via':108C 'vulner':13A,71C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2012-06-07T22:55:17+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2012-0507","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0507","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:07+00:00","note":null},{"source":"epss","external_id":"CVE-2012-0507","url":"https://api.first.org/data/v1/epss?cve=CVE-2012-0507","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2012-0507","url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0507","severity":null,"published_at":"2012-06-07T22:55:17+00:00","modified_at":"2026-08-14T05:16:51+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}