# MA-297.022012: MyCERT Alert - Multiple Critical Vulnerabilities in Oracle Java SE

**Date:** 15 Feb 2012  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-297.022012  
**Advisory ID:** MA-297.022012

---

**1.0 Introduction**
Multiple critical vulnerabilities have been identified in Oracle Java SE. These vulnerabilities would cause the application to crash and could potentially allow an attacker to take control of the affected system. [1]
**2.0 Impact**
An attacker who has successfully exploited these vulnerabilities such as by tricking the users to visit a website with a malicious java applets, could execute code remotely and gain the same privilege as the user.
**3.0 Affected Products**
- JDK and JRE 7 Update 2 and earlier
- JDK and JRE 6 Update 30 and earlier
- JDK and JRE 5.0 Update 33 and earlier
- SDK and JRE 1.4.2\_35 and earlier
**4.0 Recommendation**
Oracle has released a security update for these issues. Users are highly encouraged to download the most recent release of Java JDK and JRE to address these vulnerabilities. Update can be obtained from:
- Oracle Java SE Critical Patch Update February 2012
<https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1404863.1>
- Developers can download the latest release from <http://www.oracle.com/technetwork/java/javase/downloads/index.html>
- Users running Java SE with a browser can download the latest release from
[http://java.com](http://java.com/)
- Users on the Windows platform can also use automatic updates to get the latest release.
Generally, MyCERT advises the users of this product to be updated with the latest security announcements by the vendor. Users who receive suspicious applets or URL can forward them to MyCERT for further analysis. MyCERT can be reached through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#8de0f4eee8fff9cde0f4eee8fff9a3e2ffeaa3e0f4)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
i. <http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html>