Integer overflow

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...

CVE-2010-0089

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0091

CVE-2010-0091 is evidenced in connected Nessus entries tied to OpenJDK/OpenJRE updates for Scientific Linux Scientific Linux Security Update: java-1.6.0-openjdk (SL5.x) and related OpenJDK advisories. The described issue: unsigned applets could retrieve dragged information before the drop action ...

CVE-2010-0847

CVE-2010-0847 is described in connected Nessus/OSINT sources as an OpenJDK ImagingLib arbitrary code execution vulnerability in the Java 6 OpenJDK/OpenJDK stack (OpenJDK ImagingLib component). Affected product lineage appears to be Java 1.6/OpenJDK builds that include ImagingLib; the exact affect...

CVE-2010-0850

CVE-2010-0850 is an unspecified vulnerability in the Java 2D component of Oracle Java SE and Java for Business 1.3.1_27. The connected documents confirm the affected software and component (Java 2D) but do not provide a concrete root cause, exploit details, affected versions beyond the product/da...

CVE-2010-0087

Technical details for CVE-2010-0087 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-0841

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...

CVE-2010-0849

CVE-2010-0849 affects Oracle Java SE/Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27. The described issue is a heap-based overflow in a JPEGImageDecoderImpl decoding routine (claimed) that could enable code execution via a crafted JPEG image, impacting confidentiality, integr...

CVE-2010-0844

Technical details for CVE-2010-0844 are not publicly provided in the supplied documents. No concrete affected products, versions, or fixes are present here. Monitor for updates.

CVE-2010-0843

CVE-2010-0843 affects Oracle Java SE/Java for Business: Sound component in Java 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27. Root cause described as related to XNewPtr and improper handling of an integer parameter when allocating heap memory in com.sun.media.sound libraries, enabling remot...

CVE-2010-0842

CVE-2010-0842 affects Oracle Java SE and Java for Business: Sound component vulnerabilities in Java 6u18 and earlier (also listed for 5.0u23, 1.4.2_25, 1.3.1_27) allow remote attackers to compromise confidentiality, integrity, and availability via unknown vectors. Connected sources provide concre...

CVE-2010-0092

CVE-2010-0092 is reported in OpenJDK/OpenJRE and Oracle Java SE/OpenJDK contexts. The connected documents indicate the flaw is in the OpenJDK/OpenJRE implementation where operations involving AtomicReferenceArray can lead to a crash (SIGSEGV) in affected Java runtimes, contributing to potential s...

CVE-2010-0848

CVE-2010-0848 is referenced in connected records as an OpenJDK/OpenJRE issue: a missing input validation flaw in the JRE could cause an untrusted applet or application to crash. Affected context in the provided OpenVAS/Nessus entries ties this CVE to Java 6/OpenJDK components, notably in SL/Fedor...

CVE-2010-0085

Technical details for CVE-2010-0085 are not publicly available in the provided documents. No explicit affected product/version or exploit information is provided here. Monitor for official advisories for updates.

CVE-2010-0844

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March...

CVE-2010-0838

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Orac...

CVE-2010-0850

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-0087

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-0090

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors...

CVE-2010-0846

Technical details for CVE-2010-0846 are not provided in the connected documents. No concrete product/version/root-cause/impact/fix details are available here. Monitor for updates from authoritative sources.