CVE-2012-1543

Vulnerabilidad sin especificar en el componente JavaFX en Oracle Java SE JavaFX 2.2.4 y anteriores, permite a atacantes remotos comprometer la integridad, disponibilidad y confidencialidad a través de vectores no especificados. Vulnerabilidad distinta de otros CVEs listados en febrero de 2003.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the JavaFX WCMediaPlayer class. All WCMediaPlayer's private native methods are accessible from descendant classes through corresponding protected methods. A value utilized by these native functions can be controlled by the class constructor and can be set to an arbitrary memory pointer to cause memory corruption. An attacker could leverage this to gain remote code execution under the context of the process.