CVE-2012-0547

CVE-2012-0547 describes an unspecified vulnerability within the Java Runtime Environment (JRE) in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, specifically impacting the AWT component. Oracle initially categorized it as a "security-in-depth issue" not directly exploitable but capable of aggravating other vulnerabilities. Despite a CVSS score of 0.0, indicating no direct impact, exploit intelligence shows a Metasploit module (EDB-20865) for Remote Code Execution in Java 7 Applets, contradicting Oracle's initial assessment. The vulnerability has garnered significant community discussion and media coverage, with articles from Krebs on Security and SecurityWeek highlighting its critical nature and the release of fixes. While not on the KEV or Hot List, the existence of public exploit code and media attention suggest a higher practical risk than its CVSS score implies.