NVD

Id
12955  
Name
CVE-2010-1423  
Description
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-04-15  
Modified Date
2013-11-15  
Seq
2010-1423  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71728 12955 CVE-2010-1423 20100409 Java Deployment Toolkit Performs Insufficient Validation of Parameters  View
71729 12955 CVE-2010-1423 oval:org.mitre.oval:def:14090  View
71730 12955 CVE-2010-1423 VU#886582  View
71731 12955 CVE-2010-1423 http://www.reversemode.com/index.php?option=com_content&task=view&id=67&Itemid=1  View
71732 12955 CVE-2010-1423 1023840  View
71733 12955 CVE-2010-1423 ADV-2010-0853  View
71734 12955 CVE-2010-1423 jre-toolkit-command-execution(57615)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35667 JVNDB-2010-001447 Java NPAPI plugin および Java Deployment Toolkit における任意のコードを実行される脆弱性 Windows および Linux 上で稼働する Java NPAPI plugin および Java Deployment Toolkit の URI には、任意のコードを実行される脆弱性が存在します。 CVE-2010-1423 44003 CVE-2010-1423 12955 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001447.html 2010-04-15 2010-05-19 View