PT-2010-3117 · Oracle · Java+1

Tavis Ormandy · Published 2010-04-15 · Updated 2022-05-13 · CVE-2010-1423

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java versions 6 Update 10 through 6 Update 19

Description The issue allows remote attackers to execute arbitrary code via the -J or -XXaltjvm argument to javaws.exe, which is processed by the launch method. This is related to an argument injection vulnerability in the URI handler in the Java NPAPI plugin and Java Deployment Toolkit.

Recommendations For Java versions 6 Update 10 through 6 Update 19, update to a version that contains a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the javaws.exe executable to minimize the risk of exploitation. Avoid using the -J or -XXaltjvm arguments in the javaws.exe command until the issue is resolved.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2010-1423

Affected Products

Java

Java Platform

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_arginject_altjvm.rb · Exploit
• 🔥 https://exploit-db.com/exploits/41700 · Exploit
• 🔥 http://reversemode.com/index.php?option=com_content&task=view&id=67&Itemid=1 · Exploit
• http://secunia.com/advisories/39260 · Vendor Advisory
• http://vupen.com/english/advisories/2010/0853 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1423 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14090 · Note
• http://osvdb.org/63648 · Note
• http://kb.cert.org/vuls/id/886582 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57615 · Note
• http://securitytracker.com/id?1023840 · Note
• http://xforce.iss.net/xforce/xfdb/57615 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074036.html · Note