CVE-2010-4448

8 documents6 sources
Severity
2.6LOW
EPSS
1.7%
top 17.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 17
Latest updateMay 14

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to Networking. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue involves "DNS cache poisoning by

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages3 packages

NVDsun/jdk1.6.0+3
NVDsun/jre1.6.0+33
NVDsun/sdk1.4.2_29+29

Patches

🔴Vulnerability Details

2
GHSA
GHSA-q763-247f-jf2v: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 52022-05-14
CVEList
CVE-2010-4448: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 52011-02-17

📋Vendor Advisories

4
Ubuntu
OpenJDK 6 vulnerabilities2011-03-17
Ubuntu
OpenJDK 6 vulnerabilities2011-03-15
Ubuntu
OpenJDK 6 vulnerabilities2011-03-01
Red Hat
OpenJDK DNS cache poisoning by untrusted applets (6981922)2011-02-15

💬Community

1
Bugzilla
CVE-2010-4448 OpenJDK DNS cache poisoning by untrusted applets (6981922)2011-02-08
CVE-2010-4448 (LOW CVSS 2.6) | Unspecified vulnerability in the Ja | cvebase.io