Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-0838

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.

Published

2010-04-01T16:30:00.843

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sun	jre	≤ 1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jdk	≤ 1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	≤ 1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jre	≤ 1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes

References

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 ([email protected])
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 ([email protected])
http://lists.apple.com/archives/security-announce/2010//May/msg00001.html ([email protected])
http://lists.apple.com/archives/security-announce/2010//May/msg00002.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html ([email protected])
http://marc.info/?l=bugtraq&m=127557596201693&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=127557596201693&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=134254866602253&w=2 ([email protected])
http://secunia.com/advisories/39292 Vendor Advisory ([email protected])
http://secunia.com/advisories/39317 Vendor Advisory ([email protected])
http://secunia.com/advisories/39659 Vendor Advisory ([email protected])
http://secunia.com/advisories/39819 Vendor Advisory ([email protected])
http://secunia.com/advisories/40545 Vendor Advisory ([email protected])
http://secunia.com/advisories/43308 Vendor Advisory ([email protected])
http://support.apple.com/kb/HT4170 ([email protected])
http://support.apple.com/kb/HT4171 ([email protected])
http://ubuntu.com/usn/usn-923-1 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 ([email protected])
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html ([email protected])
http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0337.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0338.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0339.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0383.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0471.html ([email protected])
http://www.securityfocus.com/archive/1/510534/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/516397/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/39069 ([email protected])
http://www.vmware.com/security/advisories/VMSA-2011-0003.html ([email protected])
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html ([email protected])
http://www.vupen.com/english/advisories/2010/1107 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/1191 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/1454 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/1793 Vendor Advisory ([email protected])
http://www.zerodayinitiative.com/advisories/ZDI-10-061 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/57346 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10482 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13923 ([email protected])
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 (af854a3a-2127-422b-91ae-364da2661108)
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2010//May/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2010//May/msg00002.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=127557596201693&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=127557596201693&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=134254866602253&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39292 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39317 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39659 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39819 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/40545 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43308 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT4170 (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT4171 (af854a3a-2127-422b-91ae-364da2661108)
http://ubuntu.com/usn/usn-923-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0337.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0338.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0339.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0383.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0471.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/510534/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/516397/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/39069 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2011-0003.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1107 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1191 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1454 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1793 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.zerodayinitiative.com/advisories/ZDI-10-061 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/57346 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10482 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13923 (af854a3a-2127-422b-91ae-364da2661108)