CVE

Id
43424  
CVE No.
CVE-2010-0840  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."  
Phase
Assigned (20100303)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
473122 43424 CVE-2010-0840 BUGTRAQ:20100405 ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability  View
473123 43424 CVE-2010-0840 URL:http://www.securityfocus.com/archive/1/archive/1/510528/100/0/threaded  View
473124 43424 CVE-2010-0840 BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
473125 43424 CVE-2010-0840 URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded  View
473126 43424 CVE-2010-0840 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-056  View
473127 43424 CVE-2010-0840 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html  View
473128 43424 CVE-2010-0840 CONFIRM:http://support.apple.com/kb/HT4170  View
473129 43424 CVE-2010-0840 CONFIRM:http://support.apple.com/kb/HT4171  View
473130 43424 CVE-2010-0840 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
473131 43424 CVE-2010-0840 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
473132 43424 CVE-2010-0840 CONFIRM:http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
473133 43424 CVE-2010-0840 APPLE:APPLE-SA-2010-05-18-1  View
473134 43424 CVE-2010-0840 URL:http://lists.apple.com/archives/security-announce/2010//May/msg00001.html  View
473135 43424 CVE-2010-0840 APPLE:APPLE-SA-2010-05-18-2  View
473136 43424 CVE-2010-0840 URL:http://lists.apple.com/archives/security-announce/2010//May/msg00002.html  View
473137 43424 CVE-2010-0840 HP:HPSBMA02547  View
473138 43424 CVE-2010-0840 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751  View
473139 43424 CVE-2010-0840 HP:SSRT100179  View
473140 43424 CVE-2010-0840 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751  View
473141 43424 CVE-2010-0840 HP:HPSBMU02799  View
473142 43424 CVE-2010-0840 URL:http://marc.info/?l=bugtraq&m=134254866602253&w=2  View
473143 43424 CVE-2010-0840 HP:HPSBUX02524  View
473144 43424 CVE-2010-0840 URL:http://marc.info/?l=bugtraq&m=127557596201693&w=2  View
473145 43424 CVE-2010-0840 HP:SSRT100089  View
473146 43424 CVE-2010-0840 URL:http://marc.info/?l=bugtraq&m=127557596201693&w=2  View
473147 43424 CVE-2010-0840 MANDRIVA:MDVSA-2010:084  View
473148 43424 CVE-2010-0840 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:084  View
473149 43424 CVE-2010-0840 REDHAT:RHSA-2010:0337  View
473150 43424 CVE-2010-0840 URL:http://www.redhat.com/support/errata/RHSA-2010-0337.html  View
473151 43424 CVE-2010-0840 REDHAT:RHSA-2010:0338  View
473152 43424 CVE-2010-0840 URL:http://www.redhat.com/support/errata/RHSA-2010-0338.html  View
473153 43424 CVE-2010-0840 REDHAT:RHSA-2010:0339  View
473154 43424 CVE-2010-0840 URL:http://www.redhat.com/support/errata/RHSA-2010-0339.html  View
473155 43424 CVE-2010-0840 REDHAT:RHSA-2010:0383  View
473156 43424 CVE-2010-0840 URL:http://www.redhat.com/support/errata/RHSA-2010-0383.html  View
473157 43424 CVE-2010-0840 REDHAT:RHSA-2010:0471  View
473158 43424 CVE-2010-0840 URL:http://www.redhat.com/support/errata/RHSA-2010-0471.html  View
473159 43424 CVE-2010-0840 REDHAT:RHSA-2010:0489  View
473160 43424 CVE-2010-0840 URL:http://www.redhat.com/support/errata/RHSA-2010-0489.html  View
473161 43424 CVE-2010-0840 SUSE:SUSE-SR:2010:008  View
473162 43424 CVE-2010-0840 URL:http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html  View
473163 43424 CVE-2010-0840 SUSE:SUSE-SR:2010:011  View
473164 43424 CVE-2010-0840 URL:http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html  View
473165 43424 CVE-2010-0840 SUSE:SUSE-SR:2010:017  View
473166 43424 CVE-2010-0840 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html  View
473167 43424 CVE-2010-0840 UBUNTU:USN-923-1  View
473168 43424 CVE-2010-0840 URL:http://ubuntu.com/usn/usn-923-1  View
473169 43424 CVE-2010-0840 BID:39065  View
473170 43424 CVE-2010-0840 URL:http://www.securityfocus.com/bid/39065  View
473171 43424 CVE-2010-0840 OVAL:oval:org.mitre.oval:def:9974  View
473172 43424 CVE-2010-0840 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9974  View
473173 43424 CVE-2010-0840 OVAL:oval:org.mitre.oval:def:13971  View
473174 43424 CVE-2010-0840 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13971  View
473175 43424 CVE-2010-0840 SECUNIA:39292  View
473176 43424 CVE-2010-0840 URL:http://secunia.com/advisories/39292  View
473177 43424 CVE-2010-0840 SECUNIA:39317  View
473178 43424 CVE-2010-0840 URL:http://secunia.com/advisories/39317  View
473179 43424 CVE-2010-0840 SECUNIA:39659  View
473180 43424 CVE-2010-0840 URL:http://secunia.com/advisories/39659  View
473181 43424 CVE-2010-0840 SECUNIA:39819  View
473182 43424 CVE-2010-0840 URL:http://secunia.com/advisories/39819  View
473183 43424 CVE-2010-0840 SECUNIA:40211  View
473184 43424 CVE-2010-0840 URL:http://secunia.com/advisories/40211  View
473185 43424 CVE-2010-0840 SECUNIA:40545  View
473186 43424 CVE-2010-0840 URL:http://secunia.com/advisories/40545  View
473187 43424 CVE-2010-0840 SECUNIA:43308  View
473188 43424 CVE-2010-0840 URL:http://secunia.com/advisories/43308  View
473189 43424 CVE-2010-0840 VUPEN:ADV-2010-1107  View
473190 43424 CVE-2010-0840 URL:http://www.vupen.com/english/advisories/2010/1107  View
473191 43424 CVE-2010-0840 VUPEN:ADV-2010-1191  View
473192 43424 CVE-2010-0840 URL:http://www.vupen.com/english/advisories/2010/1191  View
473193 43424 CVE-2010-0840 VUPEN:ADV-2010-1454  View
473194 43424 CVE-2010-0840 URL:http://www.vupen.com/english/advisories/2010/1454  View
473195 43424 CVE-2010-0840 VUPEN:ADV-2010-1523  View
473196 43424 CVE-2010-0840 URL:http://www.vupen.com/english/advisories/2010/1523  View
473197 43424 CVE-2010-0840 VUPEN:ADV-2010-1793  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35538 JVNDB-2010-001318 複数の Oracle 製品の Sound コンポーネントにおける脆弱性 複数の Oracle 製品の Sound コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-0844 43424 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001318.html  View