CVE-2012-3174 — OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933)

Back Back to CVE browser

HIGH

OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933)

Published Jan 14, 2013

10.0

HIGH

CVSS 2.0

EPSS 4.58%

Description

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114.

Affected products

Red Hat Enterprise Linux 5

java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1

Fixed · RHSA-2013:0165
Red Hat Enterprise Linux 6

java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3

Fixed · RHSA-2013:0165
Supplementary for Red Hat Enterprise Linux 5

java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el5_9

Fixed · RHSA-2013:0626
Supplementary for Red Hat Enterprise Linux 5

java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el5_9

Fixed · RHSA-2013:0156
Supplementary for Red Hat Enterprise Linux 6

java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4

Fixed · RHSA-2013:0626
Supplementary for Red Hat Enterprise Linux 6

java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3

Fixed · RHSA-2013:0156
Red Hat Enterprise Linux 5

java-1.5.0-ibm

Not affected
Red Hat Enterprise Linux 5

java-1.6.0-ibm

Not affected
Red Hat Enterprise Linux 6

java-1.5.0-ibm

Not affected
Red Hat Enterprise Linux 6

java-1.6.0-ibm

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1	Fixed	RHSA-2013:0165
Red Hat Enterprise Linux 6	java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3	Fixed	RHSA-2013:0165
Supplementary for Red Hat Enterprise Linux 5	java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el5_9	Fixed	RHSA-2013:0626
Supplementary for Red Hat Enterprise Linux 5	java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el5_9	Fixed	RHSA-2013:0156
Supplementary for Red Hat Enterprise Linux 6	java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4	Fixed	RHSA-2013:0626
Supplementary for Red Hat Enterprise Linux 6	java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3	Fixed	RHSA-2013:0156
Red Hat Enterprise Linux 5	java-1.5.0-ibm	Not affected	n/a
Red Hat Enterprise Linux 5	java-1.6.0-ibm	Not affected	n/a
Red Hat Enterprise Linux 6	java-1.5.0-ibm	Not affected	n/a
Red Hat Enterprise Linux 6	java-1.6.0-ibm	Not affected	n/a

Remediation

No remediation recorded yet.

Metrics

4.58% 0.04577

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.04577

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	4.58% (0.04577)	91.33th	v5 (v2026.06.15)
Jun 15, 2026	4.58% (0.04577)	90.38th	v5 (v2026.06.15)
Mar 30, 2025	1.21% (0.01206)	77.09th	v4 (v2025.03.14)
Mar 29, 2025	2.66% (0.02659)	76.26th	v4 (v2025.03.14)
Mar 17, 2025	1.21% (0.01206)	77.57th	v4 (v2025.03.14)
Dec 17, 2024	8.29% (0.08290)	94.37th	v3 (v2023.03.01)
Dec 10, 2024	14.44% (0.14437)	95.93th	v3 (v2023.03.01)
Oct 13, 2024	10.74% (0.10736)	95.22th	v3 (v2023.03.01)
Mar 7, 2023	9.40% (0.09401)	93.71th	v3 (v2023.03.01)
Mar 6, 2023	1.41% (0.01408)	72.89th	v2 (v2022.01.01)
Mar 2, 2023	1.41% (0.01408)	72.88th	v2 (v2022.01.01)
Apr 1, 2022	1.41% (0.01408)	70.87th	v2 (v2022.01.01)
Feb 4, 2022	1.41% (0.01408)	49.94th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (12)

http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/
x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00025.html
vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2013-0156.html
vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2013-0165.html
vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2013:095
vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html
x_refsource_CONFIRMVendor Advisory
http://www.ubuntu.com/usn/USN-1693-1
vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/cve/CVE-2012-3174
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=894934
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2012-3174
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0018
x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2012-3174

Link	Providers	Tags
http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/		x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00025.html		vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2013-0156.html		vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2013-0165.html		vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2013:095		vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html		x_refsource_CONFIRMVendor Advisory
http://www.ubuntu.com/usn/USN-1693-1		vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/cve/CVE-2012-3174		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=894934		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2012-3174
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0018		x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2012-3174

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner oracle

Published Jan 14, 2013

Updated Aug 6, 2024

Reserved Jun 6, 2012

Link CVE-2012-3174

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2012-3174

Red Hat

Severity Critical

Public date Jan 13, 2013

Links CVE-2012-3174 - Bugzilla