PT-2010-4913 · Oracle+1 · Java Se+3

Publicado 2010-10-12 · Atualizado 2017-09-19 · CVE-2010-3552

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE and Java for Business version 6 Update 21

Description The issue affects the New Java Plug-in component, allowing remote attackers to impact confidentiality, integrity, and availability through unknown vectors.

Recommendations For Oracle Java SE and Java for Business version 6 Update 21, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2010-3552

HPSBUX02608

RHSA-2010:0770

ZDI-10-206

Produtos afetados

Hp-Ux

Java Platform

Java Se

Java For Business

Referências · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_basicservice_impl.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_docbase_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/15241 · Exploit
• 🔥 https://exploit-db.com/exploits/16587 · Exploit
• http://redhat.com/support/errata/RHSA-2010-0770.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-3552 · Nota de Segurança
• http://support.avaya.com/css/P8/documents/100123193 · Nota
• https://zerodayinitiative.com/advisories/ZDI-10-206 · Nota de Segurança
• http://support.avaya.com/css/P8/documents/100114315 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12004 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11829 · Nota
• http://marc.info/?l=bugtraq&m=134254866602253&w=2 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/javacpuoct2010-176258.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html · Aviso do Fabricante
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 · Aviso do Fabricante