9.8

CVE-2010-0840

Warnung
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Jre Version1.4.2_25
Oracle ≫ Jre Version1.5.0 Updateupdate23
Oracle ≫ Jre Version1.6.0 Updateupdate18
Opensuse ≫ Opensuse Version11.0
Opensuse ≫ Opensuse Version11.1
Opensuse ≫ Opensuse Version11.2
Canonical ≫ Ubuntu Linux Version8.04 SwEdition-
Canonical ≫ Ubuntu Linux Version8.10
Canonical ≫ Ubuntu Linux Version9.04
Canonical ≫ Ubuntu Linux Version9.10

25.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Oracle JRE Unspecified Vulnerability

Schwachstelle

Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 96.32% 0.999
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/516397/100/0/threaded
Third Party Advisory
Broken Link
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
Third Party Advisory
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
Release Notes
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
Patch
Third Party Advisory
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
Broken Link
http://secunia.com/advisories/40545
Vendor Advisory
Broken Link
http://www.vupen.com/english/advisories/2010/1793
Vendor Advisory
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
Third Party Advisory
Mailing List
http://www.vupen.com/english/advisories/2010/1107
Broken Link
http://lists.apple.com/archives/security-announce/2010//May/msg00001.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/39819
Vendor Advisory
Broken Link
http://support.apple.com/kb/HT4171
Third Party Advisory
Release Notes
http://www.vupen.com/english/advisories/2010/1191
Vendor Advisory
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/39317
Vendor Advisory
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:084
Broken Link
http://marc.info/?l=bugtraq&m=134254866602253&w=2
Mailing List
http://lists.apple.com/archives/security-announce/2010//May/msg00002.html
Third Party Advisory
Mailing List
http://marc.info/?l=bugtraq&m=127557596201693&w=2
Mailing List
http://secunia.com/advisories/39292
Vendor Advisory
Broken Link
http://secunia.com/advisories/43308
Vendor Advisory
Broken Link
http://support.apple.com/kb/HT4170
Third Party Advisory
Release Notes
http://ubuntu.com/usn/usn-923-1
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0337.html
Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0338.html
Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0339.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
Third Party Advisory
Mailing List
http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html
Patch
Third Party Advisory
http://secunia.com/advisories/39659
Vendor Advisory
Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0383.html
Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0471.html
Broken Link
http://www.vupen.com/english/advisories/2010/1454
Vendor Advisory
Broken Link
http://secunia.com/advisories/40211
Vendor Advisory
Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0489.html
Broken Link
http://www.securityfocus.com/archive/1/510528/100/0/threaded
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/39065
Third Party Advisory
Broken Link
VDB Entry
http://www.vupen.com/english/advisories/2010/1523
Vendor Advisory
Broken Link
http://www.zerodayinitiative.com/advisories/ZDI-10-056
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13971
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9974
Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0840
US Government Resource