PT-2011-1566 · Oracle+2 · Java Runtime Environment+3

Publicado 2011-02-15 · Atualizado 2018-10-30 · CVE-2010-4462

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java versions prior to 6 Update 24 Oracle Java versions prior to 5.0 Update 28 Oracle Java versions prior to 1.4.2 30

Description The issue affects the Java Runtime Environment, allowing remote attackers to impact confidentiality, integrity, and availability. This is related to the Sound component and unspecified APIs.

Recommendations For versions prior to 6 Update 24, update to version 6 Update 24 or later. For versions prior to 5.0 Update 28, update to version 5.0 Update 28 or later. For versions prior to 1.4.2 30, update to version 1.4.2 30 or later.

Exploit

Correção

Identificadores relacionados

CVE-2010-4462

HPSBUX02777

RHSA-2011:0282

RHSA-2011:0357

RHSA-2011:0364

RHSA-2011:0490

RHSA-2011:0870

RHSA-2011:0880

RHSA-2011_0282

RHSA-2011_0357

RHSA-2011_0364

ZDI-11-085

Produtos afetados

Hp-Ux

Java Platform

Java Runtime Environment

Red Hat

Referências · 79

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_codebase_trust.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/mpgn/BEAST-PoC · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3548 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4473 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3552 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802 · Nota de Segurança
• http://secunia.com/advisories/44954 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4454 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4450 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4447 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4462 · Nota