PT-2010-2572 · Oracle+1 · Java Se+3

Regenrecht · Publicado 2010-04-01 · Atualizado 2018-10-30 · CVE-2010-0849

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE and Java for Business versions 6 Update 18, 5.0 Update 23, 1.4.2 25, and 1.3.1 27

Description The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. It is claimed by a reliable researcher to be a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.

Recommendations For Oracle Java SE and Java for Business version 6 Update 18, update to a newer version to mitigate the risk. For Oracle Java SE and Java for Business version 5.0 Update 23, update to a newer version to mitigate the risk. For Oracle Java SE and Java for Business version 1.4.2 25, update to a newer version to mitigate the risk. For Oracle Java SE and Java for Business version 1.3.1 27, update to a newer version to mitigate the risk. As a temporary workaround, consider disabling the use of the JPEGImageDecoderImpl interface until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2010-0849

HPSBUX02524

RHSA-2010:0337

RHSA-2010:0338

RHSA-2010:0383

RHSA-2010:0471

RHSA-2010:0489

RHSA-2010:0574

RHSA-2010:0586

ZDI-10-057

Produtos afetados

Hp-Ux

Java Platform

Java Se

Java For Business

Referências · 104

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_mixer_sequencer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rmi_connection_impl.rb · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• http://marc.info/?l=bugtraq&m=127557596201693&w=2 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05274 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05269 · Nota de Segurança
• http://secunia.com/advisories/39819 · Aviso do Fabricante
• http://secunia.com/advisories/43308 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0093 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2010-0338.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-05279 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-09417 · Nota de Segurança