CVE-2010-0093 — JDK vulnerability

7 documents6 sources

Severity

5.1MEDIUMNVD

EPSS

3.6%

top 12.12%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE SUN SDK

Timeline

PublishedApr 1

Latest updateMay 2

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095.

CVSS vector

AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4

Affected Packages3 packages

▶NVDsun/jdk1.6.0+3

▶NVDsun/jre1.6.0+29

▶NVDsun/sdk1.4.2_25+25

🔴Vulnerability Details

GHSA

GHSA-w2hp-v5c3-39q4: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2022-05-02

▶

CVEList

CVE-2010-0093: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2010-04-01

▶

📋Vendor Advisories

Ubuntu

OpenJDK vulnerabilities↗2010-04-07

▶

Red Hat

OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)↗2010-03-30

▶

Red Hat

OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954)↗2010-03-30

▶

💬Community

Bugzilla

CVE-2010-0093 OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)↗2010-03-22

▶