CVE-2010-4452
published 2011-02-17CVE-2010-4452: Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows…
PriorityP182critical10CVSS 2.0
AVNACLAuNCCICAC
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
83.16%
99.6th percentile
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | jdk | <= 1.6.0 | — |
| sun | jdk | — | — |
| sun | jre | <= 1.6.0 | — |
| sun | jre | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Exploit delivers a malicious Java applet with a 'codebase' parameter pointing to a trusted local directory (e.g., JRE lib/ext) and a 'code' parameter that is a URL containing no dots, causing the applet to execute outside the Java sandbox. ↗
- →The exploit module serves a crafted .class file (AppletX.class) over HTTP; monitor for HTTP responses with Content-Type 'application/octet-stream' delivering .class files from unexpected sources. ↗
- →CVE-2010-4452 was observed being served by the Blackhole Exploit Kit alongside other exploits (CVE-2010-3552); presence of mario.jar, info.exe, or calc.exe dropped from a web context is a strong indicator of compromise. ↗
- →The exploit targets JRE 6 prior to Update 24 (specifically tested against 1.6.0u21, u22, u23 on Windows x86 + IE); flag Java processes on unpatched JRE versions loading remote .class files. ↗
- ·The Metasploit module's LIBPATH default points to a Windows-specific JRE path; the exploit fails on Linux (Ubuntu x86 + Firefox + Sun Java 1.6.0u23 was tested and failed), limiting reliable exploitation to Windows targets. ↗
- ·The vulnerability is described as 'unspecified' by Oracle; the actual attack vector details are not publicly documented beyond the sandbox-escape mechanism via codebase/code parameter manipulation. ↗
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vulncheck10.0CRITICAL
vendor_redhat10.0CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mq39-jwgr-3jxw: Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlie
ghsa_unreviewed·2022-05-17
CVE-2010-4452 [HIGH] GHSA-mq39-jwgr-3jxw: Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlie
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
VulnCheck
Java Runtime Environment (JRE) Deployment Component Unspecified Vulnerability
vulncheck·2010·CVSS 10.0
CVE-2010-4452 [CRITICAL] Java Runtime Environment (JRE) Deployment Component Unspecified Vulnerability
Java Runtime Environment (JRE) Deployment Component Unspecified Vulnerability
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
Affected: sun jre
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://web.archive.org/web/20110727214953/http://community.websense.com/blogs/securitylabs/archive/2011/06/20/malware-campaign-uses-direct-injection-of-java-exploit-code.aspx; https://securelist.com/massive-dns-
Red Hat
JDK unspecified vulnerability in Deployment component
vendor_redhat·2011-02-15·CVSS 10.0
CVE-2010-4452 [CRITICAL] JDK unspecified vulnerability in Deployment component
JDK unspecified vulnerability in Deployment component
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
No detection rules found.
Exploit-DB
Sun Java Applet2ClassLoader - Remote Code Execution (Metasploit)
exploitdb·2011-03-16
CVE-2010-4452 Sun Java Applet2ClassLoader - Remote Code Execution (Metasploit)
Sun Java Applet2ClassLoader - Remote Code Execution (Metasploit)
---
##
# $Id: java_codebase_trust.rb 11983 2011-03-16 05:01:29Z jduck $
##
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
require 'rex'
class Metasploit3 'Sun Java Applet2ClassLoader Remote Code Execution Exploit',
'Description' => %q{
This module exploits a vulnerability in Java Runtime Environment
that allows an attacker to escape the Java Sandbox. By supplying a
codebase that points at a trusted directory and a code that is a URL that
does not contain an dots an applet can run without the sandb
Metasploit
Sun Java Applet2ClassLoader Remote Code Execution
metasploit
Sun Java Applet2ClassLoader Remote Code Execution
Sun Java Applet2ClassLoader Remote Code Execution
This module exploits a vulnerability in the Java Runtime Environment that allows an attacker to run an applet outside of the Java Sandbox. When an applet is invoked with: 1. A "codebase" parameter that points at a trusted directory 2. A "code" parameter that is a URL that does not contain any dots the applet will run outside of the sandbox. This vulnerability affects JRE prior to version 6 update 24.
Bugzilla
CVE-2010-4452 JDK unspecified vulnerability in Deployment component
bugzilla·2011-02-16·CVSS 10.0
CVE-2010-4452 [CRITICAL] CVE-2010-4452 JDK unspecified vulnerability in Deployment component
CVE-2010-4452 JDK unspecified vulnerability in Deployment component
Update 24 of Oracle/Sun Java fixes an unspecified vulnerability in the
Deployment component (CVE-2010-4452). The CVSSv2 scored upstream is
cvss2=7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P
Reference:
http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html#AppendixJAVA
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Extras for RHEL 4
Via RHSA-2011:0282 https://rhn.redhat.com/errata/RHSA-2011-0282.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Extras for RHEL 4
Via RHSA-2011:0357 https://rhn.redhat.
Zscaler
Malicious URL’s Using DWORD Formatted IP Addresses | Zscaler
blogs_zscaler·2011-08-03
Malicious URL’s Using DWORD Formatted IP Addresses | Zscaler
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
Zscaler
USPS.gov Website Infected with Blackhole EK | Zscaler Blog
blogs_zscaler·2011-04-07·CVSS 10.0
[CRITICAL] USPS.gov Website Infected with Blackhole EK | Zscaler Blog
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=134254957702612&w=2http://secunia.com/advisories/44954http://securityreason.com/securityalert/8145http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.htmlhttp://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0282.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0880.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12927https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14230http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=134254957702612&w=2http://secunia.com/advisories/44954http://securityreason.com/securityalert/8145http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.htmlhttp://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0282.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0880.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12927https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14230
2011-02-17
Published
Exploited in the wild