Lucene search

K
cveOracleCVE-2010-0849
HistoryApr 01, 2010 - 4:30 p.m.

CVE-2010-0849

2010-04-0116:30:01
oracle
web.nvd.nist.gov
42
cve-2010-0849
oracle
java se
java for business
update
remote attacks
confidentiality
integrity
availability
buffer overflow
jpeg image

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.109

Percentile

95.2%

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.

Affected configurations

Nvd
Node
sunjreRange1.6.0update_18
OR
sunjreMatch1.6.0
OR
sunjreMatch1.6.0update_1
OR
sunjreMatch1.6.0update_10
OR
sunjreMatch1.6.0update_11
OR
sunjreMatch1.6.0update_12
OR
sunjreMatch1.6.0update_13
OR
sunjreMatch1.6.0update_14
OR
sunjreMatch1.6.0update_15
OR
sunjreMatch1.6.0update_16
OR
sunjreMatch1.6.0update_17
OR
sunjreMatch1.6.0update_2
OR
sunjreMatch1.6.0update_3
OR
sunjreMatch1.6.0update_4
OR
sunjreMatch1.6.0update_5
OR
sunjreMatch1.6.0update_6
OR
sunjreMatch1.6.0update_7
Node
sunjdkRange1.6.0update_18
OR
sunjdkMatch1.6.0
OR
sunjdkMatch1.6.0update_10
OR
sunjdkMatch1.6.0update_11
OR
sunjdkMatch1.6.0update_12
OR
sunjdkMatch1.6.0update_13
OR
sunjdkMatch1.6.0update_14
OR
sunjdkMatch1.6.0update_15
OR
sunjdkMatch1.6.0update_16
OR
sunjdkMatch1.6.0update_17
OR
sunjdkMatch1.6.0update_3
OR
sunjdkMatch1.6.0update_4
OR
sunjdkMatch1.6.0update_5
OR
sunjdkMatch1.6.0update_6
OR
sunjdkMatch1.6.0update_7
OR
sunjdkMatch1.6.0update1
OR
sunjdkMatch1.6.0update1_b06
OR
sunjdkMatch1.6.0update2
Node
sunjdkRange1.5.0update23
OR
sunjdkMatch1.5.0
OR
sunjdkMatch1.5.0update1
OR
sunjdkMatch1.5.0update10
OR
sunjdkMatch1.5.0update11
OR
sunjdkMatch1.5.0update12
OR
sunjdkMatch1.5.0update13
OR
sunjdkMatch1.5.0update14
OR
sunjdkMatch1.5.0update15
OR
sunjdkMatch1.5.0update16
OR
sunjdkMatch1.5.0update17
OR
sunjdkMatch1.5.0update18
OR
sunjdkMatch1.5.0update19
OR
sunjdkMatch1.5.0update2
OR
sunjdkMatch1.5.0update20
OR
sunjdkMatch1.5.0update21
OR
sunjdkMatch1.5.0update22
OR
sunjdkMatch1.5.0update3
OR
sunjdkMatch1.5.0update4
OR
sunjdkMatch1.5.0update5
OR
sunjdkMatch1.5.0update6
OR
sunjdkMatch1.5.0update7
OR
sunjdkMatch1.5.0update8
OR
sunjdkMatch1.5.0update9
Node
sunsdkRange1.4.2_25
OR
sunsdkMatch1.4.2
OR
sunsdkMatch1.4.2_1
OR
sunsdkMatch1.4.2_02
OR
sunsdkMatch1.4.2_3
OR
sunsdkMatch1.4.2_4
OR
sunsdkMatch1.4.2_5
OR
sunsdkMatch1.4.2_6
OR
sunsdkMatch1.4.2_7
OR
sunsdkMatch1.4.2_8
OR
sunsdkMatch1.4.2_9
OR
sunsdkMatch1.4.2_10
OR
sunsdkMatch1.4.2_11
OR
sunsdkMatch1.4.2_12
OR
sunsdkMatch1.4.2_13
OR
sunsdkMatch1.4.2_14
OR
sunsdkMatch1.4.2_15
OR
sunsdkMatch1.4.2_16
OR
sunsdkMatch1.4.2_17
OR
sunsdkMatch1.4.2_18
OR
sunsdkMatch1.4.2_19
OR
sunsdkMatch1.4.2_20
OR
sunsdkMatch1.4.2_21
OR
sunsdkMatch1.4.2_22
OR
sunsdkMatch1.4.2_23
OR
sunsdkMatch1.4.2_24
Node
sunjreRange1.5.0update23
OR
sunjreMatch1.5.0
OR
sunjreMatch1.5.0update1
OR
sunjreMatch1.5.0update10
OR
sunjreMatch1.5.0update11
OR
sunjreMatch1.5.0update12
OR
sunjreMatch1.5.0update13
OR
sunjreMatch1.5.0update14
OR
sunjreMatch1.5.0update15
OR
sunjreMatch1.5.0update16
OR
sunjreMatch1.5.0update17
OR
sunjreMatch1.5.0update18
OR
sunjreMatch1.5.0update19
OR
sunjreMatch1.5.0update2
OR
sunjreMatch1.5.0update20
OR
sunjreMatch1.5.0update21
OR
sunjreMatch1.5.0update22
OR
sunjreMatch1.5.0update3
OR
sunjreMatch1.5.0update4
OR
sunjreMatch1.5.0update5
OR
sunjreMatch1.5.0update6
OR
sunjreMatch1.5.0update7
OR
sunjreMatch1.5.0update8
OR
sunjreMatch1.5.0update9
Node
sunjreRange1.4.2_25
OR
sunjreMatch1.4.2
OR
sunjreMatch1.4.2_1
OR
sunjreMatch1.4.2_2
OR
sunjreMatch1.4.2_3
OR
sunjreMatch1.4.2_4
OR
sunjreMatch1.4.2_5
OR
sunjreMatch1.4.2_6
OR
sunjreMatch1.4.2_7
OR
sunjreMatch1.4.2_8
OR
sunjreMatch1.4.2_9
OR
sunjreMatch1.4.2_10
OR
sunjreMatch1.4.2_11
OR
sunjreMatch1.4.2_12
OR
sunjreMatch1.4.2_13
OR
sunjreMatch1.4.2_14
OR
sunjreMatch1.4.2_15
OR
sunjreMatch1.4.2_16
OR
sunjreMatch1.4.2_17
OR
sunjreMatch1.4.2_18
OR
sunjreMatch1.4.2_19
OR
sunjreMatch1.4.2_20
OR
sunjreMatch1.4.2_21
OR
sunjreMatch1.4.2_22
OR
sunjreMatch1.4.2_23
OR
sunjreMatch1.4.2_24
Node
sunjdkRange1.3.1_27
OR
sunjdkMatch1.3.0
OR
sunjdkMatch1.3.0_01
OR
sunjdkMatch1.3.0_02
OR
sunjdkMatch1.3.0_03
OR
sunjdkMatch1.3.0_04
OR
sunjdkMatch1.3.0_05
OR
sunjdkMatch1.3.1
OR
sunjdkMatch1.3.1_01
OR
sunjdkMatch1.3.1_01a
OR
sunjdkMatch1.3.1_02
OR
sunjdkMatch1.3.1_03
OR
sunjdkMatch1.3.1_04
OR
sunjdkMatch1.3.1_05
OR
sunjdkMatch1.3.1_06
OR
sunjdkMatch1.3.1_07
OR
sunjdkMatch1.3.1_08
OR
sunjdkMatch1.3.1_09
OR
sunjdkMatch1.3.1_10
OR
sunjdkMatch1.3.1_11
OR
sunjdkMatch1.3.1_12
OR
sunjdkMatch1.3.1_13
OR
sunjdkMatch1.3.1_14
OR
sunjdkMatch1.3.1_15
OR
sunjdkMatch1.3.1_16
OR
sunjdkMatch1.3.1_17
OR
sunjdkMatch1.3.1_18
OR
sunjdkMatch1.3.1_19
OR
sunjdkMatch1.3.1_20
OR
sunjdkMatch1.3.1_21
OR
sunjdkMatch1.3.1_22
OR
sunjdkMatch1.3.1_23
OR
sunjdkMatch1.3.1_24
OR
sunjdkMatch1.3.1_25
OR
sunjdkMatch1.3.1_26
Node
sunjreRange1.3.1_27
OR
sunjreMatch1.3.0
OR
sunjreMatch1.3.0update1
OR
sunjreMatch1.3.0update2
OR
sunjreMatch1.3.0update3
OR
sunjreMatch1.3.0update4
OR
sunjreMatch1.3.0update5
OR
sunjreMatch1.3.1
OR
sunjreMatch1.3.1update1
OR
sunjreMatch1.3.1update2
OR
sunjreMatch1.3.1_2
OR
sunjreMatch1.3.1_03
OR
sunjreMatch1.3.1_04
OR
sunjreMatch1.3.1_05
OR
sunjreMatch1.3.1_06
OR
sunjreMatch1.3.1_07
OR
sunjreMatch1.3.1_08
OR
sunjreMatch1.3.1_09
OR
sunjreMatch1.3.1_10
OR
sunjreMatch1.3.1_11
OR
sunjreMatch1.3.1_12
OR
sunjreMatch1.3.1_13
OR
sunjreMatch1.3.1_14
OR
sunjreMatch1.3.1_15
OR
sunjreMatch1.3.1_16
OR
sunjreMatch1.3.1_17
OR
sunjreMatch1.3.1_18
OR
sunjreMatch1.3.1_19
OR
sunjreMatch1.3.1_20
OR
sunjreMatch1.3.1_21
OR
sunjreMatch1.3.1_22
OR
sunjreMatch1.3.1_23
OR
sunjreMatch1.3.1_24
OR
sunjreMatch1.3.1_25
OR
sunjreMatch1.3.1_26
Node
sunsdkRange1.3.1_27
OR
sunsdkMatch1.3.0
OR
sunsdkMatch1.3.0_01
OR
sunsdkMatch1.3.0_02
OR
sunsdkMatch1.3.0_03
OR
sunsdkMatch1.3.0_04
OR
sunsdkMatch1.3.0_05
OR
sunsdkMatch1.3.1
OR
sunsdkMatch1.3.1_01
OR
sunsdkMatch1.3.1_01a
OR
sunsdkMatch1.3.1_02
OR
sunsdkMatch1.3.1_03
OR
sunsdkMatch1.3.1_04
OR
sunsdkMatch1.3.1_05
OR
sunsdkMatch1.3.1_06
OR
sunsdkMatch1.3.1_07
OR
sunsdkMatch1.3.1_08
OR
sunsdkMatch1.3.1_09
OR
sunsdkMatch1.3.1_10
OR
sunsdkMatch1.3.1_11
OR
sunsdkMatch1.3.1_12
OR
sunsdkMatch1.3.1_13
OR
sunsdkMatch1.3.1_14
OR
sunsdkMatch1.3.1_15
OR
sunsdkMatch1.3.1_16
OR
sunsdkMatch1.3.1_17
OR
sunsdkMatch1.3.1_18
OR
sunsdkMatch1.3.1_19
OR
sunsdkMatch1.3.1_20
OR
sunsdkMatch1.3.1_21
OR
sunsdkMatch1.3.1_22
OR
sunsdkMatch1.3.1_23
OR
sunsdkMatch1.3.1_24
OR
sunsdkMatch1.3.1_25
OR
sunsdkMatch1.3.1_26
VendorProductVersionCPE
sunjre*cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*
Rows per page:
1-10 of 2381

References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.109

Percentile

95.2%