Description

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.

Remediation

References

CVE-2012-2967

Related Vulnerabilities

WordPress Plugin Genesis Simple Defaults Arbitrary File Upload (1.0.0)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-46144)

Oracle Application Server CVE-2009-1009 Vulnerability (CVE-2009-1009)

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29515)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50721)

Severity

High

Classification

CVE-2012-2967

Tags

Missing Update Known Vulnerabilities