What’s Vulnerable › Vulnerabilities

CVE-2012-1717

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-06-16 · updated 2026-06-16

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.

Affected products

• Oracle Java SE: from 1.4.2 through 1.4.2_37; 1.5.0, 1.5.0-update1, 1.5.0-update10, 1.5.0-update11, 1.5.0-update12, 1.5.0-update13 (+67)
• Oracle Java SE: from 1.4.2 through 1.4.2_37; 1.5.0, 1.5.0-update1, 1.5.0-update10, 1.5.0-update11, 1.5.0-update12, 1.5.0-update13 (+67)
• RedHat Enterprise Linux Desktop: 5.0, 6.0
• RedHat Enterprise Linux Eus: 6.2
• RedHat Enterprise Linux For Ibm Z Systems: 5.0
• RedHat Enterprise Linux For Power Big Endian: 5.0
• RedHat Enterprise Linux For Scientific Computing: 6.0
• RedHat Enterprise Linux Server: 5.0, 6.0
• RedHat Enterprise Linux Server Aus: 6.2
• RedHat Enterprise Linux Server From Rhui: 6.0
• RedHat Enterprise Linux Workstation: 5.0, 6.0
• IcedTea6: before 1.10.8; from 1.11.0 before 1.11.3 — fixed in 1.10.8, 1.11.3
• RedHat Satellite With Embedded Oracle: 5.5
• SUSE Linux Enterprise Server 15 SP1: 10-sp4
• SUSE Linux Enterprise Java: 10-sp4, 11-sp2
• SUSE Linux Enterprise Server: 10-sp4, 11-sp2
• SUSE Linux Enterprise Software Development Kit: 11-sp2

How to fix

Upgrade to a fixed version: IcedTea6 1.10.8, 1.11.3. Check the vendor advisory for mitigations.

References

• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html
• http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-June/019076.html
• http://rhn.redhat.com/errata/RHSA-2012-0734.html
• http://rhn.redhat.com/errata/RHSA-2012-1243.html
• http://rhn.redhat.com/errata/RHSA-2013-1455.html
• http://rhn.redhat.com/errata/RHSA-2013-1456.html
• http://secunia.com/advisories/50659
• http://secunia.com/advisories/51080
• http://security.gentoo.org/glsa/glsa-201406-32.xml

Get alerted when CVE-2012-1717 or the next vulnerability affects your stack