Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-0094

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.

Published

2010-04-01T16:30:00.767

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sun	jre	≤ 1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jdk	≤ 1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	≤ 1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jre	≤ 1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes

References

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 ([email protected])
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 ([email protected])
http://lists.apple.com/archives/security-announce/2010//May/msg00001.html ([email protected])
http://lists.apple.com/archives/security-announce/2010//May/msg00002.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html ([email protected])
http://marc.info/?l=bugtraq&m=127557596201693&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=127557596201693&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=134254866602253&w=2 ([email protected])
http://secunia.com/advisories/39292 Vendor Advisory ([email protected])
http://secunia.com/advisories/39317 Vendor Advisory ([email protected])
http://secunia.com/advisories/39659 Vendor Advisory ([email protected])
http://secunia.com/advisories/39819 Vendor Advisory ([email protected])
http://secunia.com/advisories/40545 Vendor Advisory ([email protected])
http://secunia.com/advisories/43308 Vendor Advisory ([email protected])
http://support.apple.com/kb/HT4170 ([email protected])
http://support.apple.com/kb/HT4171 ([email protected])
http://ubuntu.com/usn/usn-923-1 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 ([email protected])
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html ([email protected])
http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0337.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0338.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0339.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0383.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0471.html ([email protected])
http://www.securityfocus.com/archive/1/510527/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/516397/100/0/threaded ([email protected])
http://www.vmware.com/security/advisories/VMSA-2011-0003.html ([email protected])
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html ([email protected])
http://www.vupen.com/english/advisories/2010/1107 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/1191 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/1454 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/1793 Vendor Advisory ([email protected])
http://www.zerodayinitiative.com/advisories/ZDI-10-051 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10851 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14351 ([email protected])
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 (af854a3a-2127-422b-91ae-364da2661108)
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2010//May/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2010//May/msg00002.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=127557596201693&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=127557596201693&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=134254866602253&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39292 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39317 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39659 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39819 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/40545 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43308 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT4170 (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT4171 (af854a3a-2127-422b-91ae-364da2661108)
http://ubuntu.com/usn/usn-923-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0337.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0338.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0339.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0383.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0471.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/510527/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/516397/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2011-0003.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1107 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1191 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1454 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1793 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.zerodayinitiative.com/advisories/ZDI-10-051 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10851 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14351 (af854a3a-2127-422b-91ae-364da2661108)