CVE-2010-3555
published 2010-10-19CVE-2010-3555: Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality…
PriorityP353critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
7.97%
94.1th percentile
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | jdk | <= 1.6.0 | — |
| sun | jdk | — | — |
| sun | jre | <= 1.6.0 | — |
| sun | jre | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
vendor_cisco6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f2gj-f7q5-jjg4: Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidenti
ghsa_unreviewed·2022-05-17
CVE-2010-3555 [HIGH] GHSA-f2gj-f7q5-jjg4: Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidenti
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
Red Hat
JDK unspecified vulnerability in Deployment component
vendor_redhat·2010-10-12·CVSS 9.3
CVE-2010-3555 [CRITICAL] JDK unspecified vulnerability in Deployment component
JDK unspecified vulnerability in Deployment component
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
Cisco
MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability
vendor_cisco·2010-05-19·CVSS 6.8
CVE-2010-1321 [MEDIUM] CWE-399 MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability
MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability
MIT Kerberos contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service (DoS) condition.
The vulnerability is in the GSS-API acceptor component due to lack of pointer validation. An authenticated, remote attacker could exploit the vulnerability by making a crafted request to the affected component. This action could cause the component to crash, resulting in a DoS condition.
MIT has confirmed this vulnerability and released updated software.
The vulnerability can be exploited only by an authenticated attacker, which somewhat reduces the threat of an attack on affected systems.
Cisco Network Admission Control Guest Server may be affected if Active Directory single sign-on is
No detection rules found.
No public exploits indexed.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlhttp://marc.info/?l=bugtraq&m=134254866602253&w=2http://secunia.com/advisories/42974http://secunia.com/advisories/44954http://support.avaya.com/css/P8/documents/100114315http://support.avaya.com/css/P8/documents/100123193http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlhttp://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0770.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0987.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0880.htmlhttp://www.securityfocus.com/bid/44038http://www.zerodayinitiative.com/advisories/ZDI-10-207/https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11320https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12222http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlhttp://marc.info/?l=bugtraq&m=134254866602253&w=2http://secunia.com/advisories/42974http://secunia.com/advisories/44954http://support.avaya.com/css/P8/documents/100114315http://support.avaya.com/css/P8/documents/100123193http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlhttp://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0770.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0987.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0880.htmlhttp://www.securityfocus.com/bid/44038http://www.zerodayinitiative.com/advisories/ZDI-10-207/https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11320https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12222
2010-10-19
Published