Check Point Advisories

Preemptive Protection against Oracle JRE Restrictions Bypass Remote Code Execution (CVE-2012-4681)

Check Point Reference:	CPAI-2012-622
Date Published:	1 Oct 2012
Severity:	High
Last Updated:	Sunday 01 January, 2012
Source:	CVE-2012-4681
Protection Provided by:
Who is Vulnerable?	Java Runtime Environment (JRE) Applications
Vulnerability Description	Multiple remote code execution vulnerabilities have been reported in Oracle Java Runtime Environment (JRE).
Vulnerability Details	The vulnerabilities are due to restrictions bypass. A remote attacker can exploit these vulnerabilities by enticing a target user to open a malicious Java applet with the vulnerable application. Successful exploitation could allow an attacker to inject and execute code on the target.