PT-2010-4930 · Oracle+2 · Java Se+4
Marc Schoenefeld
·
Publicado
2010-10-13
·
Atualizado
2018-10-30
·
CVE-2010-3569
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Java SE versions 5.0 Update 25, 6 Update 21, and 1.4.2 27
Java for Business versions 5.0 Update 25, 6 Update 21, and 1.4.2 27
Description
The issue affects confidentiality, integrity, and availability. It is reported that remote attackers can exploit this issue via unknown vectors. There are claims that this issue allows remote attackers to execute arbitrary code by causing the
defaultReadObject method in the Serialization API to set a volatile field multiple times.Recommendations
For Java SE versions 5.0 Update 25, 6 Update 21, and 1.4.2 27, update to a version that contains the fix for this issue.
For Java for Business versions 5.0 Update 25, 6 Update 21, and 1.4.2 27, update to a version that contains the fix for this issue.
As a temporary workaround, consider restricting access to the Serialization API until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Hp-Ux
Java Platform
Java Se
Java For Business
Red Hat