CVE-2010-0850

CVE-2010-0850 is an unspecified vulnerability in the Java 2D component of Oracle Java SE and Java for Business 1.3.1_27. The connected documents confirm the affected software and component (Java 2D) but do not provide a concrete root cause, exploit details, affected versions beyond the product/da...

CVE-2010-0844

Technical details for CVE-2010-0844 are not publicly provided in the supplied documents. No concrete affected products, versions, or fixes are present here. Monitor for updates.

CVE-2010-0843

CVE-2010-0843 affects Oracle Java SE/Java for Business: Sound component in Java 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27. Root cause described as related to XNewPtr and improper handling of an integer parameter when allocating heap memory in com.sun.media.sound libraries, enabling remot...

CVE-2010-0089

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0087

Technical details for CVE-2010-0087 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-0847

CVE-2010-0847 is described in connected Nessus/OSINT sources as an OpenJDK ImagingLib arbitrary code execution vulnerability in the Java 6 OpenJDK/OpenJDK stack (OpenJDK ImagingLib component). Affected product lineage appears to be Java 1.6/OpenJDK builds that include ImagingLib; the exact affect...

CVE-2010-0092

CVE-2010-0092 is reported in OpenJDK/OpenJRE and Oracle Java SE/OpenJDK contexts. The connected documents indicate the flaw is in the OpenJDK/OpenJRE implementation where operations involving AtomicReferenceArray can lead to a crash (SIGSEGV) in affected Java runtimes, contributing to potential s...

CVE-2010-0837

CVE-2010-0837 describes an unspecified vulnerability in the Pack200 component of Oracle Java SE and Java for Business . Affects versions listed in the initial entry (e.g., 6 Update 18, 5.0 Update, 23, etc.). The description notes a remote attacker could affect confidentiality, integrity, and avai...

CVE-2010-0842

A remote code execution vulnerability exists in Oracle Java SE (versions 6u18 and prior, including 5.0 Update 23, 1.4.2_25, and 1.3.1_27) within the Sound component . The flaw is caused by an uncontrolled array index when processing a specially crafted MIDI file (within an RMF file) using a Mixer...

CVE-2010-0085

Technical details for CVE-2010-0085 are not publicly available in the provided documents. No explicit affected product/version or exploit information is provided here. Monitor for official advisories for updates.

CVE-2010-0849

CVE-2010-0849 affects Oracle Java SE/Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27. The described issue is a heap-based overflow in a JPEGImageDecoderImpl decoding routine (claimed) that could enable code execution via a crafted JPEG image, impacting confidentiality, integr...

CVE-2010-0838

CVE-2010-0838 is an Oracle Java vulnerability: an unspecified issue in the JVM's CMM module with a readMabCurveData buffer overflow caused by an untrusted size value. Affects Oracle Java SE and Java for Business platforms: 6 Update 18, 5.0 Update, and 23. The impact is described as affecting conf...

CVE-2010-0087

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-0846

Technical details for CVE-2010-0846 are not provided in the connected documents. No concrete product/version/root-cause/impact/fix details are available here. Monitor for updates from authoritative sources.

CVE-2010-0091

CVE-2010-0091 is evidenced in connected Nessus entries tied to OpenJDK/OpenJRE updates for Scientific Linux Scientific Linux Security Update: java-1.6.0-openjdk (SL5.x) and related OpenJDK advisories. The described issue: unsigned applets could retrieve dragged information before the drop action ...

CVE-2010-0845

CVE-2010-0845 is addressed in Oracle’s March 2010 Java CPU advisory (and related Oracle/OpenJDK advisories). The connected documents indicate CVE-2010-0845 is among OpenJDK/JRE vulnerabilities fixed by the CPU update, which also bundles fixes for other OpenJDK issues and notes that affected Java ...

OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091...

JDK unspecified vulnerability in JWS/Plugin component

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...