CVE-2012-1717

low

Published 2012-06-16 · Modified 2026-04-29

CVSS v3

—

CVSS v2

2.1

VIR risk

2.1

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html

OS impact

OS	Version	Status
linux-kernel	-	not-affected
rhel	5.0	affected
rhel	6.0	affected
rhel	6.2	affected
suse	10	affected
suse	11	affected

Application impact

Vendor	Product	Versions	Fixed
oracle	jre	`{"startIncluding":"1.4.2","endIncluding":"1.4.2_37"}`
oracle	jre	`1.5.0`
oracle	jre	`1.6.0`
oracle	jre	`1.7.0`
oracle	jdk	`{"startIncluding":"1.4.2","endIncluding":"1.4.2_37"}`
oracle	jdk	`1.5.0`
oracle	jdk	`1.6.0`
oracle	jdk	`1.7.0`
redhat	icedtea6	`{"endExcluding":"1.10.8"}`	`1.10.8`
redhat	satellite_with_embedded_oracle	`5.5`

References

Verify integrity in audit chain (admin only). AS-IS.