CVE-2012-4305

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue allows remote attackers to execute arbitrary code via vectors related to an "invalid type cast" and exposed native methods in the T2KGlyph class.

• http://marc.info/?l=bugtraq&m=136733161405818&w=2
• http://www.kb.cert.org/vuls/id/858729US Government Resource
• http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.htmlVendor Advisory
• http://www.us-cert.gov/cas/techalerts/TA13-032A.htmlUS Government Resource
• http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1030
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16392
• http://marc.info/?l=bugtraq&m=136733161405818&w=2
• http://www.kb.cert.org/vuls/id/858729US Government Resource
• http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.htmlVendor Advisory
• http://www.us-cert.gov/cas/techalerts/TA13-032A.htmlUS Government Resource
• http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1030
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16392

Published

Feb 2, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4295Array index error in the channelised_fill_sdh_g707_format fu…
• CVE-2012-4296Buffer overflow in epan/dissectors/packet-rtps2.c in the RTP…
• CVE-2012-4297Buffer overflow in the dissect_gsm_rlcmac_downlink function …
• CVE-2012-4298Integer signedness error in the vwr_read_rec_data_ethernet f…
• CVE-2012-4301Unspecified vulnerability in the JavaFX component in Oracle …
• CVE-2012-4303Unspecified vulnerability in the Oracle WebCenter Content co…
• CVE-2012-4324Cross-site request forgery (CSRF) vulnerability in PHPJabber…
• CVE-2012-4325Cross-site request forgery (CSRF) vulnerability in upload/us…
• CVE-2012-4326Cross-site request forgery (CSRF) vulnerability in commonset…
• CVE-2012-4327Unspecified vulnerability in the Image News slider plugin be…
• CVE-2012-4328Unspecified vulnerability in the MAPI in vBulletin Suite 4.1…
• CVE-2012-4329The Samsung D6000 TV and possibly other products allow remot…