CVE

Id
43426  
CVE No.
CVE-2010-0842  
Status
Candidate  
Description
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.  
Phase
Assigned (20100303)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
473260 43426 CVE-2010-0842 BUGTRAQ:20100405 ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability  View
473261 43426 CVE-2010-0842 URL:http://www.securityfocus.com/archive/1/archive/1/510532/100/0/threaded  View
473262 43426 CVE-2010-0842 BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
473263 43426 CVE-2010-0842 URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded  View
473264 43426 CVE-2010-0842 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-060  View
473265 43426 CVE-2010-0842 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html  View
473266 43426 CVE-2010-0842 CONFIRM:http://support.apple.com/kb/HT4170  View
473267 43426 CVE-2010-0842 CONFIRM:http://support.apple.com/kb/HT4171  View
473268 43426 CVE-2010-0842 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
473269 43426 CVE-2010-0842 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
473270 43426 CVE-2010-0842 CONFIRM:http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
473271 43426 CVE-2010-0842 APPLE:APPLE-SA-2010-05-18-1  View
473272 43426 CVE-2010-0842 URL:http://lists.apple.com/archives/security-announce/2010//May/msg00001.html  View
473273 43426 CVE-2010-0842 APPLE:APPLE-SA-2010-05-18-2  View
473274 43426 CVE-2010-0842 URL:http://lists.apple.com/archives/security-announce/2010//May/msg00002.html  View
473275 43426 CVE-2010-0842 HP:HPSBMA02547  View
473276 43426 CVE-2010-0842 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751  View
473277 43426 CVE-2010-0842 HP:SSRT100179  View
473278 43426 CVE-2010-0842 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751  View
473279 43426 CVE-2010-0842 HP:HPSBMU02799  View
473280 43426 CVE-2010-0842 URL:http://marc.info/?l=bugtraq&m=134254866602253&w=2  View
473281 43426 CVE-2010-0842 HP:HPSBUX02524  View
473282 43426 CVE-2010-0842 URL:http://marc.info/?l=bugtraq&m=127557596201693&w=2  View
473283 43426 CVE-2010-0842 HP:SSRT100089  View
473284 43426 CVE-2010-0842 URL:http://marc.info/?l=bugtraq&m=127557596201693&w=2  View
473285 43426 CVE-2010-0842 REDHAT:RHSA-2010:0337  View
473286 43426 CVE-2010-0842 URL:http://www.redhat.com/support/errata/RHSA-2010-0337.html  View
473287 43426 CVE-2010-0842 REDHAT:RHSA-2010:0338  View
473288 43426 CVE-2010-0842 URL:http://www.redhat.com/support/errata/RHSA-2010-0338.html  View
473289 43426 CVE-2010-0842 REDHAT:RHSA-2010:0383  View
473290 43426 CVE-2010-0842 URL:http://www.redhat.com/support/errata/RHSA-2010-0383.html  View
473291 43426 CVE-2010-0842 REDHAT:RHSA-2010:0471  View
473292 43426 CVE-2010-0842 URL:http://www.redhat.com/support/errata/RHSA-2010-0471.html  View
473293 43426 CVE-2010-0842 REDHAT:RHSA-2010:0489  View
473294 43426 CVE-2010-0842 URL:http://www.redhat.com/support/errata/RHSA-2010-0489.html  View
473295 43426 CVE-2010-0842 SUSE:SUSE-SR:2010:008  View
473296 43426 CVE-2010-0842 URL:http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html  View
473297 43426 CVE-2010-0842 SUSE:SUSE-SR:2010:017  View
473298 43426 CVE-2010-0842 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html  View
473299 43426 CVE-2010-0842 BID:39077  View
473300 43426 CVE-2010-0842 URL:http://www.securityfocus.com/bid/39077  View
473301 43426 CVE-2010-0842 OVAL:oval:org.mitre.oval:def:14101  View
473302 43426 CVE-2010-0842 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14101  View
473303 43426 CVE-2010-0842 SECUNIA:39317  View
473304 43426 CVE-2010-0842 URL:http://secunia.com/advisories/39317  View
473305 43426 CVE-2010-0842 SECUNIA:39659  View
473306 43426 CVE-2010-0842 URL:http://secunia.com/advisories/39659  View
473307 43426 CVE-2010-0842 SECUNIA:39819  View
473308 43426 CVE-2010-0842 URL:http://secunia.com/advisories/39819  View
473309 43426 CVE-2010-0842 SECUNIA:40211  View
473310 43426 CVE-2010-0842 URL:http://secunia.com/advisories/40211  View
473311 43426 CVE-2010-0842 SECUNIA:40545  View
473312 43426 CVE-2010-0842 URL:http://secunia.com/advisories/40545  View
473313 43426 CVE-2010-0842 SECUNIA:43308  View
473314 43426 CVE-2010-0842 URL:http://secunia.com/advisories/43308  View
473315 43426 CVE-2010-0842 VUPEN:ADV-2010-1191  View
473316 43426 CVE-2010-0842 URL:http://www.vupen.com/english/advisories/2010/1191  View
473317 43426 CVE-2010-0842 VUPEN:ADV-2010-1454  View
473318 43426 CVE-2010-0842 URL:http://www.vupen.com/english/advisories/2010/1454  View
473319 43426 CVE-2010-0842 VUPEN:ADV-2010-1523  View
473320 43426 CVE-2010-0842 URL:http://www.vupen.com/english/advisories/2010/1523  View
473321 43426 CVE-2010-0842 VUPEN:ADV-2010-1793  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35553 JVNDB-2010-001333 複数の Oracle 製品の ImageIO コンポーネントにおける脆弱性 複数の Oracle 製品の ImageIO コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-0846 43426 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001333.html  View