CVE-2010-0846

Technical details for CVE-2010-0846 are not provided in the connected documents. No concrete product/version/root-cause/impact/fix details are available here. Monitor for updates from authoritative sources.

CVE-2010-0849

CVE-2010-0849 affects Oracle Java SE/Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27. The described issue is a heap-based overflow in a JPEGImageDecoderImpl decoding routine (claimed) that could enable code execution via a crafted JPEG image, impacting confidentiality, integr...

CVE-2010-0850

CVE-2010-0850 is an unspecified vulnerability in the Java 2D component of Oracle Java SE and Java for Business 1.3.1_27. The connected documents confirm the affected software and component (Java 2D) but do not provide a concrete root cause, exploit details, affected versions beyond the product/da...

CVE-2010-0087

Technical details for CVE-2010-0087 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-0847

CVE-2010-0847 is described in connected Nessus/OSINT sources as an OpenJDK ImagingLib arbitrary code execution vulnerability in the Java 6 OpenJDK/OpenJDK stack (OpenJDK ImagingLib component). Affected product lineage appears to be Java 1.6/OpenJDK builds that include ImagingLib; the exact affect...

CVE-2010-0845

CVE-2010-0845 is addressed in Oracle’s March 2010 Java CPU advisory (and related Oracle/OpenJDK advisories). The connected documents indicate CVE-2010-0845 is among OpenJDK/JRE vulnerabilities fixed by the CPU update, which also bundles fixes for other OpenJDK issues and notes that affected Java ...

CVE-2010-0838

CVE-2010-0838 is an Oracle Java vulnerability: an unspecified issue in the JVM's CMM module with a readMabCurveData buffer overflow caused by an untrusted size value. Affects Oracle Java SE and Java for Business platforms: 6 Update 18, 5.0 Update, and 23. The impact is described as affecting conf...

CVE-2010-0850

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-0092

CVE-2010-0092 is reported in OpenJDK/OpenJRE and Oracle Java SE/OpenJDK contexts. The connected documents indicate the flaw is in the OpenJDK/OpenJRE implementation where operations involving AtomicReferenceArray can lead to a crash (SIGSEGV) in affected Java runtimes, contributing to potential s...

CVE-2010-0843

CVE-2010-0843 affects Oracle Java SE/Java for Business: Sound component in Java 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27. Root cause described as related to XNewPtr and improper handling of an integer parameter when allocating heap memory in com.sun.media.sound libraries, enabling remot...

CVE-2010-0842

A remote code execution vulnerability exists in Oracle Java SE (versions 6u18 and prior, including 5.0 Update 23, 1.4.2_25, and 1.3.1_27) within the Sound component . The flaw is caused by an uncontrolled array index when processing a specially crafted MIDI file (within an RMF file) using a Mixer...

CVE-2010-0848

CVE-2010-0848 is referenced in connected records as an OpenJDK/OpenJRE issue: a missing input validation flaw in the JRE could cause an untrusted applet or application to crash. Affected context in the provided OpenVAS/Nessus entries ties this CVE to Java 6/OpenJDK components, notably in SL/Fedor...

CVE-2010-0085

Technical details for CVE-2010-0085 are not publicly available in the provided documents. No explicit affected product/version or exploit information is provided here. Monitor for official advisories for updates.

CVE-2010-0837

CVE-2010-0837 describes an unspecified vulnerability in the Pack200 component of Oracle Java SE and Java for Business . Affects versions listed in the initial entry (e.g., 6 Update 18, 5.0 Update, 23, etc.). The description notes a remote attacker could affect confidentiality, integrity, and avai...

CVE-2010-0841

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...

CVE-2010-0090

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors...

OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

JDK multiple unspecified vulnerabilities

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March...

OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091...