CVEvulnerability

CVE-2012-4305

9.3 HIGH Published 2013-02-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-02-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue allows remote attackers to execute arbitrary code via vectors related to an "invalid type cast" and exposed native methods in the T2KGlyph class.

Affected configurations

• oracle javafx (<= 2.2.4) • oracle javafx 2.0 • oracle javafx 2.0.2 • oracle javafx 2.0.3 • oracle javafx 2.1 • oracle javafx 2.2 • oracle javafx 2.2.3

References