CVE-2010-4469

2011-02-1719:00:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2010-4469

java

jre

oracle

vulnerability

remote

untrusted

confidentiality

integrity

availability

hotspot

heap corruption

verifier

jsrs

8.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

84.7%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and “backward jsrs.”

CPENameOperatorVersion
sun:jresun jreeq1.6.0
sun:jdksun jdkeq1.6.0
sun:jdksun jdkeq1.5.0
sun:sdksun sdkeq1.4.2_19
sun:sdksun sdkeq1.4.2
sun:sdksun sdkle1.4.2_29
sun:sdksun sdkeq1.4.2_26
sun:sdksun sdkeq1.4.2_10
sun:sdksun sdkeq1.4.2_12
sun:sdksun sdkeq1.4.2_17

CPE	Name	Operator	Version
sun:jre	sun jre	eq	1.6.0
sun:jdk	sun jdk	eq	1.6.0
sun:jdk	sun jdk	eq	1.5.0
sun:sdk	sun sdk	eq	1.4.2_19
sun:sdk	sun sdk	eq	1.4.2
sun:sdk	sun sdk	le	1.4.2_29
sun:sdk	sun sdk	eq	1.4.2_26
sun:sdk	sun sdk	eq	1.4.2_10
sun:sdk	sun sdk	eq	1.4.2_12
sun:sdk	sun sdk	eq	1.4.2_17