Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 93
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:* | up to 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:* | 1.6.0 update_1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:* | 1.6.0 update_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:* | 1.6.0 update_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:* | 1.6.0 update_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:* | 1.6.0 update_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:* | 1.6.0 update_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:* | 1.6.0 update_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:* | 1.6.0 update_16 | Vulnerable | Sun |
- cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:* Versions up to 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:* Versions 1.6.0 update_1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:* Versions 1.6.0 update_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:* Versions 1.6.0 update_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:* Versions 1.6.0 update_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:* Versions 1.6.0 update_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:* Versions 1.6.0 update_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:* Versions 1.6.0 update_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:* Versions 1.6.0 update_16 Vulnerable ·Sun
Show 83 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:* | 1.6.0 update_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:* | 1.6.0 update_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:* | 1.6.0 update_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:* | 1.6.0 update_2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:* | 1.6.0 update_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:* | 1.6.0 update_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:* | 1.6.0 update_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:* | 1.6.0 update_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:* | 1.6.0 update_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:* | 1.6.0 update_7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:*:update_21:*:*:*:*:*:* | up to 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:* | 1.6.0 update_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:* | 1.6.0 update_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:* | 1.6.0 update_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:* | 1.6.0 update_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:* | 1.6.0 update_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:* | 1.6.0 update_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:* | 1.6.0 update_16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:* | 1.6.0 update_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:* | 1.6.0 update_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:* | 1.6.0 update_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:* | 1.6.0 update_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:* | 1.6.0 update_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:* | 1.6.0 update_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:* | 1.6.0 update_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:* | 1.6.0 update_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:* | 1.6.0 update_7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:* | 1.6.0 update1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:* | 1.6.0 update1_b06 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:* | 1.6.0 update2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:*:update25:*:*:*:*:*:* | up to 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:* | 1.5.0 update1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:* | 1.5.0 update10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:* | 1.5.0 update11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:* | 1.5.0 update12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:* | 1.5.0 update13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:* | 1.5.0 update14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:* | 1.5.0 update15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:* | 1.5.0 update16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:* | 1.5.0 update17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:* | 1.5.0 update18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:* | 1.5.0 update19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:* | 1.5.0 update2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:* | 1.5.0 update20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:* | 1.5.0 update21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:* | 1.5.0 update22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:* | 1.5.0 update23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:* | 1.5.0 update24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:* | 1.5.0 update3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:* | 1.5.0 update4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:* | 1.5.0 update5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:* | 1.5.0 update6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:* | 1.5.0 update7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:* | 1.5.0 update8 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:* | 1.5.0 update9 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:*:update25:*:*:*:*:*:* | up to 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* | 1.5.0 update1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:* | 1.5.0 update10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:* | 1.5.0 update11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:* | 1.5.0 update12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:* | 1.5.0 update13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:* | 1.5.0 update14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:* | 1.5.0 update15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:* | 1.5.0 update16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:* | 1.5.0 update17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:* | 1.5.0 update18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:* | 1.5.0 update19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* | 1.5.0 update2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:* | 1.5.0 update20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:* | 1.5.0 update21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:* | 1.5.0 update22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:* | 1.5.0 update23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:* | 1.5.0 update24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* | 1.5.0 update3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* | 1.5.0 update4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* | 1.5.0 update5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* | 1.5.0 update6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* | 1.5.0 update7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:* | 1.5.0 update8 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:* | 1.5.0 update9 | Vulnerable | Sun |
- cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:* Versions 1.6.0 update_17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:* Versions 1.6.0 update_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:* Versions 1.6.0 update_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:* Versions 1.6.0 update_2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:* Versions 1.6.0 update_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:* Versions 1.6.0 update_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:* Versions 1.6.0 update_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:* Versions 1.6.0 update_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:* Versions 1.6.0 update_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:* Versions 1.6.0 update_7 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:*:update_21:*:*:*:*:*:* Versions up to 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:* Versions 1.6.0 update_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:* Versions 1.6.0 update_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:* Versions 1.6.0 update_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:* Versions 1.6.0 update_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:* Versions 1.6.0 update_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:* Versions 1.6.0 update_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:* Versions 1.6.0 update_16 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:* Versions 1.6.0 update_17 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:* Versions 1.6.0 update_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:* Versions 1.6.0 update_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:* Versions 1.6.0 update_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:* Versions 1.6.0 update_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:* Versions 1.6.0 update_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:* Versions 1.6.0 update_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:* Versions 1.6.0 update_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:* Versions 1.6.0 update_7 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:* Versions 1.6.0 update1 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:* Versions 1.6.0 update1_b06 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:* Versions 1.6.0 update2 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:*:update25:*:*:*:*:*:* Versions up to 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:* Versions 1.5.0 update1 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:* Versions 1.5.0 update10 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:* Versions 1.5.0 update11 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:* Versions 1.5.0 update12 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:* Versions 1.5.0 update13 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:* Versions 1.5.0 update14 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:* Versions 1.5.0 update15 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:* Versions 1.5.0 update16 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:* Versions 1.5.0 update17 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:* Versions 1.5.0 update18 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:* Versions 1.5.0 update19 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:* Versions 1.5.0 update2 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:* Versions 1.5.0 update20 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:* Versions 1.5.0 update21 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:* Versions 1.5.0 update22 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:* Versions 1.5.0 update23 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:* Versions 1.5.0 update24 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:* Versions 1.5.0 update3 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:* Versions 1.5.0 update4 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:* Versions 1.5.0 update5 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:* Versions 1.5.0 update6 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:* Versions 1.5.0 update7 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:* Versions 1.5.0 update8 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:* Versions 1.5.0 update9 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:*:update25:*:*:*:*:*:* Versions up to 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* Versions 1.5.0 update1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:* Versions 1.5.0 update10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:* Versions 1.5.0 update11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:* Versions 1.5.0 update12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:* Versions 1.5.0 update13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:* Versions 1.5.0 update14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:* Versions 1.5.0 update15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:* Versions 1.5.0 update16 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:* Versions 1.5.0 update17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:* Versions 1.5.0 update18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:* Versions 1.5.0 update19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* Versions 1.5.0 update2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:* Versions 1.5.0 update20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:* Versions 1.5.0 update21 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:* Versions 1.5.0 update22 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:* Versions 1.5.0 update23 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:* Versions 1.5.0 update24 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* Versions 1.5.0 update3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* Versions 1.5.0 update4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* Versions 1.5.0 update5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* Versions 1.5.0 update6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* Versions 1.5.0 update7 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:* Versions 1.5.0 update8 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:* Versions 1.5.0 update9 Vulnerable ·Sun
Remediation
Red Hat 3 advisories
- RHSA-2010:0865 Released 2010-11-10 · Red Hat rating Importantjava-1.6.0-openjdk security and bug fix update
- Red Hat Enterprise Linux Desktop (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0 +2
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0 +2
- Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0
- Red Hat Enterprise Linux Workstation (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0
- RHSA-2010:0770 Released 2010-10-14 · Red Hat rating Criticaljava-1.6.0-sun security update
- Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el4 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el5 +9
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el4 +9
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el5 +9
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el4 +9
- RHSA-2010:0768 Released 2010-10-13 · Red Hat rating Importantjava-1.6.0-openjdk security and bug fix update
- Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5, java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5 +7
- Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5, java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5 +7
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 4 Extras | Fixed | RHSA-2010:0770 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2010:0768 |
| Red Hat Enterprise Linux AS version 4 Extras | Fixed | RHSA-2010:0770 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2010:0768 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2010:0865 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2010:0865 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2010:0770 |
| Red Hat Enterprise Linux ES version 4 Extras | Fixed | RHSA-2010:0770 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2010:0865 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2010:0865 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2010:0865 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2010:0865 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2010:0770 |
| Red Hat Enterprise Linux WS version 4 Extras | Fixed | RHSA-2010:0770 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2010:0865 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2010:0865 |
Timeline
- 2026-10-02 Threatist record created from CVE-2010-3561
- 2026-10-03 Alias added: GHSA-jmhr-w45r-wv9q
References
Advisory 12
Other 9
- http://support.avaya.com/css/P8/documents/100114327
- http://support.avaya.com/css/P8/documents/100114315
- https://bugzilla.redhat.com/show_bug.cgi?id=639880
- oval:org.mitre.oval:def:12200
- http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- oval:org.mitre.oval:def:12437
- http://support.avaya.com/css/P8/documents/100123193
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
More Sun Jdk vulnerabilities
- TI-2013-01300 The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update… CVSS 2.0HIGH 10.0
- TI-2008-05098 The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and… CVSS 2.0HIGH 10.0
- TI-2010-04185 Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE)… CVSS 2.0HIGH 10.0
- TI-2010-03392 Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for… CVSS 2.0HIGH 10.0
- TI-2010-03381 Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java… CVSS 2.0HIGH 10.0
- TI-2012-01342 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… CVSS 2.0HIGH 10.0
Sources
- CVE-2010-3561 · CVE Program
- CVE-2010-3561 · NVD
- FIRST EPSS
- GHSA-jmhr-w45r-wv9q · GitHub Advisory Database · CC BY 4.0
- CVE-2010-3561 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences