CVE-2010-0091 — JDK vulnerability

7 documents6 sources

Severity

4.3MEDIUMNVD

CNA5.0

EPSS

1.9%

top 16.54%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE SUN SDK

Timeline

PublishedApr 1

Latest updateMay 2

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0084.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDsun/jdk1.6.0+3

▶NVDsun/jre1.6.0+29

▶NVDsun/sdk1.4.2_25+25

🔴Vulnerability Details

GHSA

GHSA-wxc7-vw25-7jmv: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2022-05-02

▶

CVEList

CVE-2010-0091: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2010-04-01

▶

📋Vendor Advisories

Ubuntu

OpenJDK vulnerabilities↗2010-04-07

▶

Red Hat

OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)↗2010-03-30

▶

Red Hat

OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)↗2010-03-30

▶

💬Community

Bugzilla

CVE-2010-0091 OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)↗2010-03-22

▶