جزئیات آسیب‌پذیری

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."

• http://lists.apple.com/archives/security-announce/2010//May/msg00001.html vendor-advisoryx_refsource_APPLE
• http://marc.info/?l=bugtraq&m=134254866602253&w=2 vendor-advisoryx_refsource_HP
• http://www.securityfocus.com/archive/1/510528/100/0/threaded mailing-listx_refsource_BUGTRAQ
• http://secunia.com/advisories/39317 third-party-advisoryx_refsource_SECUNIA
• http://www.redhat.com/support/errata/RHSA-2010-0383.html vendor-advisoryx_refsource_REDHAT
• http://secunia.com/advisories/40545 third-party-advisoryx_refsource_SECUNIA
• http://www.vupen.com/english/advisories/2010/1454 vdb-entryx_refsource_VUPEN
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13971 vdb-entrysignaturex_refsource_OVAL
• http://secunia.com/advisories/39819 third-party-advisoryx_refsource_SECUNIA
• http://www.vupen.com/english/advisories/2010/1107 vdb-entryx_refsource_VUPEN
• http://www.redhat.com/support/errata/RHSA-2010-0338.html vendor-advisoryx_refsource_REDHAT
• http://www.vupen.com/english/advisories/2010/1793 vdb-entryx_refsource_VUPEN
• http://lists.apple.com/archives/security-announce/2010//May/msg00002.html vendor-advisoryx_refsource_APPLE
• http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html vendor-advisoryx_refsource_SUSE
• http://secunia.com/advisories/43308 third-party-advisoryx_refsource_SECUNIA
• http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html x_refsource_CONFIRM
• http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2010-0339.html vendor-advisoryx_refsource_REDHAT
• http://marc.info/?l=bugtraq&m=127557596201693&w=2 vendor-advisoryx_refsource_HP
• http://secunia.com/advisories/39292 third-party-advisoryx_refsource_SECUNIA
• http://support.apple.com/kb/HT4170 x_refsource_CONFIRM
• http://www.vupen.com/english/advisories/2010/1523 vdb-entryx_refsource_VUPEN
• http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html x_refsource_CONFIRM
• http://www.securityfocus.com/bid/39065 vdb-entryx_refsource_BID
• http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html vendor-advisoryx_refsource_SUSE
• http://secunia.com/advisories/39659 third-party-advisoryx_refsource_SECUNIA
• http://www.redhat.com/support/errata/RHSA-2010-0471.html vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html vendor-advisoryx_refsource_SUSE
• http://ubuntu.com/usn/usn-923-1 vendor-advisoryx_refsource_UBUNTU
• http://www.vmware.com/security/advisories/VMSA-2011-0003.html x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2010-0337.html vendor-advisoryx_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-0489.html vendor-advisoryx_refsource_REDHAT
• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 vendor-advisoryx_refsource_HP
• http://www.zerodayinitiative.com/advisories/ZDI-10-056 x_refsource_MISC
• http://secunia.com/advisories/40211 third-party-advisoryx_refsource_SECUNIA
• http://support.apple.com/kb/HT4171 x_refsource_CONFIRM
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9974 vdb-entrysignaturex_refsource_OVAL
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 vendor-advisoryx_refsource_MANDRIVA
• http://www.securityfocus.com/archive/1/516397/100/0/threaded mailing-listx_refsource_BUGTRAQ
• http://www.vupen.com/english/advisories/2010/1191 vdb-entryx_refsource_VUPEN
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0840 government-resource