NVD

Id
11673  
Name
CVE-2010-0094  
Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-04-01  
Modified Date
2016-08-22  
Seq
2010-0094  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64054 11673 CVE-2010-0094 HPSBMA02547  View
64055 11673 CVE-2010-0094 APPLE-SA-2010-05-18-1  View
64056 11673 CVE-2010-0094 APPLE-SA-2010-05-18-2  View
64057 11673 CVE-2010-0094 SUSE-SR:2010:008  View
64058 11673 CVE-2010-0094 SUSE-SR:2010:011  View
64059 11673 CVE-2010-0094 SSRT100089  View
64060 11673 CVE-2010-0094 HPSBMU02799  View
64061 11673 CVE-2010-0094 oval:org.mitre.oval:def:10851  View
64062 11673 CVE-2010-0094 oval:org.mitre.oval:def:14351  View
64063 11673 CVE-2010-0094 http://support.apple.com/kb/HT4170  View
64064 11673 CVE-2010-0094 http://support.apple.com/kb/HT4171  View
64065 11673 CVE-2010-0094 USN-923-1  View
64066 11673 CVE-2010-0094 MDVSA-2010:084  View
64067 11673 CVE-2010-0094 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
64068 11673 CVE-2010-0094 http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html  View
64069 11673 CVE-2010-0094 RHSA-2010:0337  View
64070 11673 CVE-2010-0094 RHSA-2010:0338  View
64071 11673 CVE-2010-0094 RHSA-2010:0339  View
64072 11673 CVE-2010-0094 RHSA-2010:0383  View
64073 11673 CVE-2010-0094 RHSA-2010:0471  View
64074 11673 CVE-2010-0094 20100405 ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability  View
64075 11673 CVE-2010-0094 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
64076 11673 CVE-2010-0094 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
64077 11673 CVE-2010-0094 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
64078 11673 CVE-2010-0094 ADV-2010-1107  View
64079 11673 CVE-2010-0094 ADV-2010-1191  View
64080 11673 CVE-2010-0094 ADV-2010-1454  View
64081 11673 CVE-2010-0094 ADV-2010-1793  View
64082 11673 CVE-2010-0094 http://www.zerodayinitiative.com/advisories/ZDI-10-051  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35544 JVNDB-2010-001324 複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性 複数の Oracle 製品の Java Runtime Environment コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-0094 42674 CVE-2010-0094 11673 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001324.html 2010-03-30 2011-03-11 View