PT-2010-1913 · Oracle+1 · Java Se+5

Publicado 2010-04-01 · Atualizado 2018-10-30 · CVE-2010-0089

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6 Update 18, 5.0 Update 23, and 1.4.2 25 Java for Business versions 6 Update 18, 5.0 Update 23, and 1.4.2 25

Description The issue affects the Java Web Start and Java Plug-in components, allowing remote attackers to impact availability through unknown vectors.

Recommendations For Oracle Java SE versions 6 Update 18, 5.0 Update 23, and 1.4.2 25, update to a version that contains the fix for this issue. For Java for Business versions 6 Update 18, 5.0 Update 23, and 1.4.2 25, update to a version that contains the fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2010-0089

HPSBUX02524

RHSA-2010:0130

RHSA-2010:0337

RHSA-2010:0338

RHSA-2010:0383

RHSA-2010:0471

RHSA-2010:0574

RHSA-2010:0586

Produtos afetados

Hp-Ux

Java Platform

Java Plug-In

Java Se

Java Web Start

Java For Business

Referências · 96

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_mixer_sequencer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rmi_connection_impl.rb · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• http://marc.info/?l=bugtraq&m=127557596201693&w=2 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05274 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05269 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0093 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2010-0338.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-05279 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-09417 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04270 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05271 · Nota de Segurança