NVD

Id
12376  
Name
CVE-2010-0840  
Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-04-01  
Modified Date
2016-08-22  
Seq
2010-0840  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
68174 12376 CVE-2010-0840 HPSBMA02547  View
68175 12376 CVE-2010-0840 APPLE-SA-2010-05-18-1  View
68176 12376 CVE-2010-0840 APPLE-SA-2010-05-18-2  View
68177 12376 CVE-2010-0840 SUSE-SR:2010:008  View
68178 12376 CVE-2010-0840 SUSE-SR:2010:011  View
68179 12376 CVE-2010-0840 SUSE-SR:2010:017  View
68180 12376 CVE-2010-0840 SSRT100089  View
68181 12376 CVE-2010-0840 HPSBMU02799  View
68182 12376 CVE-2010-0840 oval:org.mitre.oval:def:13971  View
68183 12376 CVE-2010-0840 oval:org.mitre.oval:def:9974  View
68184 12376 CVE-2010-0840 http://support.apple.com/kb/HT4170  View
68185 12376 CVE-2010-0840 http://support.apple.com/kb/HT4171  View
68186 12376 CVE-2010-0840 USN-923-1  View
68187 12376 CVE-2010-0840 MDVSA-2010:084  View
68188 12376 CVE-2010-0840 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
68189 12376 CVE-2010-0840 http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html  View
68190 12376 CVE-2010-0840 RHSA-2010:0337  View
68191 12376 CVE-2010-0840 RHSA-2010:0338  View
68192 12376 CVE-2010-0840 RHSA-2010:0339  View
68193 12376 CVE-2010-0840 RHSA-2010:0383  View
68194 12376 CVE-2010-0840 RHSA-2010:0471  View
68195 12376 CVE-2010-0840 RHSA-2010:0489  View
68196 12376 CVE-2010-0840 20100405 ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability  View
68197 12376 CVE-2010-0840 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
68198 12376 CVE-2010-0840 39065  View
68199 12376 CVE-2010-0840 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
68200 12376 CVE-2010-0840 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
68201 12376 CVE-2010-0840 ADV-2010-1107  View
68202 12376 CVE-2010-0840 ADV-2010-1191  View
68203 12376 CVE-2010-0840 ADV-2010-1454  View
68204 12376 CVE-2010-0840 ADV-2010-1523  View
68205 12376 CVE-2010-0840 ADV-2010-1793  View
68206 12376 CVE-2010-0840 http://www.zerodayinitiative.com/advisories/ZDI-10-056  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35552 JVNDB-2010-001332 複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性 複数の Oracle 製品の Java Runtime Environment コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-0840 43420 CVE-2010-0840 12376 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001332.html 2010-03-30 2011-03-11 View