PT-2010-1913 · Oracle+1 · Java Se+5

Published 2010-04-01 · Updated 2018-10-30 · CVE-2010-0089

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6 Update 18, 5.0 Update 23, and 1.4.2 25 Java for Business versions 6 Update 18, 5.0 Update 23, and 1.4.2 25

Description The issue affects the Java Web Start and Java Plug-in components, allowing remote attackers to impact availability through unknown vectors.

Recommendations For Oracle Java SE versions 6 Update 18, 5.0 Update 23, and 1.4.2 25, update to a version that contains the fix for this issue. For Java for Business versions 6 Update 18, 5.0 Update 23, and 1.4.2 25, update to a version that contains the fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2010-0089

HPSBUX02524

RHSA-2010:0130

RHSA-2010:0337

RHSA-2010:0338

RHSA-2010:0383

RHSA-2010:0471

RHSA-2010:0574

RHSA-2010:0586

Affected Products

Hp-Ux

Java Platform

Java Plug-In

Java Se

Java Web Start

Java For Business

References · 96

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_mixer_sequencer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rmi_connection_impl.rb · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• http://marc.info/?l=bugtraq&m=127557596201693&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095 · Security Note
• https://bdu.fstec.ru/vul/2015-05274 · Security Note
• https://bdu.fstec.ru/vul/2015-05269 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0093 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0338.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05279 · Security Note
• https://bdu.fstec.ru/vul/2015-09417 · Security Note
• https://bdu.fstec.ru/vul/2015-04270 · Security Note
• https://bdu.fstec.ru/vul/2015-05271 · Security Note