CVE-2010-0091 — JDK vulnerability

7 documents6 sources
Severity
4.3MEDIUMNVD
CNA5.0
EPSS
1.9%
top 16.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
SUN JDKSUN JRESUN SDK
Timeline
PublishedApr 1
Latest updateMay 2

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0084.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDsun/jdk1.6.0+3
▶NVDsun/jre1.6.0+29
▶NVDsun/sdk1.4.2_25+25

🔴Vulnerability Details

2
GHSA
GHSA-wxc7-vw25-7jmv: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2022-05-02
▶
CVEList
CVE-2010-0091: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2010-04-01
▶

📋Vendor Advisories

3
Ubuntu
OpenJDK vulnerabilities↗2010-04-07
▶
Red Hat
OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)↗2010-03-30
▶
Red Hat
OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)↗2010-03-30
▶

💬Community

1
Bugzilla
CVE-2010-0091 OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)↗2010-03-22
▶