CVE-2010-0084 — JDK vulnerability

8 documents6 sources
Severity
5.0MEDIUMNVD
EPSS
1.9%
top 16.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
SUN JDKSUN JRESUN SDK
Timeline
PublishedApr 1
Latest updateMay 2

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶NVDsun/jdk1.6.0+3
▶NVDsun/jre1.6.0+29
▶NVDsun/sdk1.4.2_25+25

🔴Vulnerability Details

2
GHSA
GHSA-h267-7942-cfp5: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2022-05-02
▶
CVEList
CVE-2010-0084: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2010-04-01
▶

📋Vendor Advisories

3
Ubuntu
OpenJDK vulnerabilities↗2010-04-07
▶
Red Hat
OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)↗2010-03-30
▶
Red Hat
OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)↗2010-03-30
▶

💬Community

2
Bugzilla
CVE-2010-4539 Subversion (mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser↗2011-01-05
▶
Bugzilla
CVE-2010-0084 OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)↗2010-03-22
▶
CVE-2010-0084 — SUN JDK vulnerability | cvebase