PT-2011-1566 · Oracle+2 · Java Runtime Environment+3

Published 2011-02-15 · Updated 2018-10-30 · CVE-2010-4462

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java versions prior to 6 Update 24 Oracle Java versions prior to 5.0 Update 28 Oracle Java versions prior to 1.4.2 30

Description The issue affects the Java Runtime Environment, allowing remote attackers to impact confidentiality, integrity, and availability. This is related to the Sound component and unspecified APIs.

Recommendations For versions prior to 6 Update 24, update to version 6 Update 24 or later. For versions prior to 5.0 Update 28, update to version 5.0 Update 28 or later. For versions prior to 1.4.2 30, update to version 1.4.2 30 or later.

Exploit

Fix

Related Identifiers

CVE-2010-4462

HPSBUX02777

RHSA-2011:0282

RHSA-2011:0357

RHSA-2011:0364

RHSA-2011:0490

RHSA-2011:0870

RHSA-2011:0880

RHSA-2011_0282

RHSA-2011_0357

RHSA-2011_0364

ZDI-11-085

Affected Products

Hp-Ux

Java Platform

Java Runtime Environment

Red Hat

References · 79

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_codebase_trust.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/mpgn/BEAST-PoC · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3548 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3552 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-085 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3556 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0506 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3549 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0505 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864 · Security Note