Unrated severityNVD Advisory· Published Dec 26, 2019· Updated Aug 6, 2024
CVE-2012-4420
CVE-2012-4420
Description
An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation (in certain circumstances they had nonzero elements right after the allocation). A remote attacker could use this flaw to obtain potentially sensitive information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- java-1.7.0-openjdk/java-1.7.0-openjdkv5Range: 1.7.0_04 to 1.7.0_10
Patches
Vulnerability mechanics
References
7- www.openwall.com/lists/oss-security/2012/09/13/3mitrex_refsource_MISC
- www.securityfocus.com/bid/55538mitrex_refsource_MISC
- access.redhat.com/security/cve/cve-2012-4420mitrex_refsource_MISC
- bugs.java.com/bugdatabase/view_bug.domitrex_refsource_MISC
- bugzilla.redhat.com/show_bug.cgimitrex_refsource_MISC
- exchange.xforce.ibmcloud.com/vulnerabilities/78693mitrex_refsource_MISC
- www.openwall.com/lists/oss-security/2012/09/12/4mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.