NVD

Id
12379  
Name
CVE-2010-0843  
Description
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-04-01  
Modified Date
2016-08-22  
Seq
2010-0843  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
68261 12379 CVE-2010-0843 SSRT100179  View
68262 12379 CVE-2010-0843 APPLE-SA-2010-05-18-1  View
68263 12379 CVE-2010-0843 APPLE-SA-2010-05-18-2  View
68264 12379 CVE-2010-0843 SUSE-SR:2010:008  View
68265 12379 CVE-2010-0843 SUSE-SR:2010:017  View
68266 12379 CVE-2010-0843 SSRT100089  View
68267 12379 CVE-2010-0843 HPSBMU02799  View
68268 12379 CVE-2010-0843 oval:org.mitre.oval:def:14092  View
68269 12379 CVE-2010-0843 20100405 ZDI-10-052: Sun Java Runtime Environment XNewPtr Remote Code Execution Vulnerability  View
68270 12379 CVE-2010-0843 http://support.apple.com/kb/HT4170  View
68271 12379 CVE-2010-0843 http://support.apple.com/kb/HT4171  View
68272 12379 CVE-2010-0843 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
68273 12379 CVE-2010-0843 http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html  View
68274 12379 CVE-2010-0843 RHSA-2010:0337  View
68275 12379 CVE-2010-0843 RHSA-2010:0338  View
68276 12379 CVE-2010-0843 RHSA-2010:0383  View
68277 12379 CVE-2010-0843 RHSA-2010:0471  View
68278 12379 CVE-2010-0843 RHSA-2010:0489  View
68279 12379 CVE-2010-0843 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
68280 12379 CVE-2010-0843 39083  View
68281 12379 CVE-2010-0843 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
68282 12379 CVE-2010-0843 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
68283 12379 CVE-2010-0843 ADV-2010-1191  View
68284 12379 CVE-2010-0843 ADV-2010-1454  View
68285 12379 CVE-2010-0843 ADV-2010-1523  View
68286 12379 CVE-2010-0843 ADV-2010-1793  View
68287 12379 CVE-2010-0843 http://www.zerodayinitiative.com/advisories/ZDI-10-052/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35539 JVNDB-2010-001319 複数の Oracle 製品の Sound コンポーネントにおける脆弱性 複数の Oracle 製品の Sound コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-0843 43423 CVE-2010-0843 12379 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001319.html 2010-03-30 2011-03-11 View