Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-0886 — JDK vulnerability

10 documents7 sources

Severity

10.0CRITICALNVD

EPSS

81.0%

top 0.85%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

SUN JDK SUN JRE

Timeline

PublishedApr 20

Latest updateMay 2

Description

Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDsun/jdk1.6.0

▶NVDsun/jre1.6.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-8wr7-r8m6-cw65: Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows r↗2022-05-02

▶

CVEList

CVE-2010-0886: Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows r↗2010-04-20

▶

VulnCheck

Oracle Java SE and Java for Business JDK Java Deployment Toolkit Component Vulnerability↗2010

▶

💥Exploits & PoCs

Exploit-DB

Sun Java - Web Start Plugin Command Line Argument Injection (Metasploit)↗2010-09-21

▶

Exploit-DB

Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)↗2010-04-09

▶

Exploit-DB

JAVA Web Start - Arbitrary Command-Line Injection↗2010-04-09

▶

Exploit-DB

Java Deployment Toolkit - Performs Insufficient Validation of Parameters↗2010-04-09

▶

📋Vendor Advisories

Red Hat

Java: Java Web Start arbitrary command line injection↗2010-04-09

▶

💬Community

Bugzilla

CVE-2010-0886 CVE-2010-0887 Sun Java: Java Web Start arbitrary command line injection↗2010-04-11

▶