Published: 01/04/2010 Updated: 10/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote malicious users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun jre
sun jre 1.6.0
sun jdk 1.6.0
sun jdk
sun jdk 1.5.0
sun jre 1.5.0

Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user’s session (CVE-2009-3555) ...

Synopsis Critical: java-160-sun security update Type/Severity Security Advisory: Critical Topic Updated java-160-sun packages that correct several security issues arenow available for Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThe Red Hat Security Response Team has rated this update as having ...

Synopsis Critical: java-150-sun security update Type/Severity Security Advisory: Critical Topic The java-150-sun packages as shipped in Red Hat Enterprise Linux 4 Extrasand 5 Supplementary contain security flaws and should not be usedThe Red Hat Security Response Team has rated this update as having cr ...

Synopsis Moderate: java-150-ibm security update Type/Severity Security Advisory: Moderate Topic Updated java-150-ibm packages that fix a security issue are now availablefor Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThis update has been rated as having moderate security impact by the RedHat S ...

Synopsis Important: java-160-openjdk security update Type/Severity Security Advisory: Important Topic Updated java-160-openjdk packages that fix several security issues arenow available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security im ...

''' __ __ ____ _ _ ____ | \/ |/ __ \ /\ | | | | _ \ | \ / | | | | / \ | | | | |_) | | |\/| | | | |/ /\ \| | | | _ < | | | | |__| / ____ \ |__| | |_) | |_| |_|\____/_/ \_\____/|____/ ''' ''' Title : Java CMM readMabCurveData stack overflow Version : Java runtime < 619 ...

Month Of Abysssec Undisclosed Bugs - Java CMM suffers from a readMabCurveData stack overflow vulnerability ...

NVD-CWE-noinfo http://www.securityfocus.com/bid/39069 http://www.redhat.com/support/errata/RHSA-2010-0339.html http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html http://www.redhat.com/support/errata/RHSA-2010-0338.html http://www.redhat.com/support/errata/RHSA-2010-0337.html http://secunia.com/advisories/39317 http://ubuntu.com/usn/usn-923-1 http://secunia.com/advisories/39292 http://www.zerodayinitiative.com/advisories/ZDI-10-061 http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 http://www.redhat.com/support/errata/RHSA-2010-0383.html http://secunia.com/advisories/39659 http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html http://www.vupen.com/english/advisories/2010/1107 http://lists.apple.com/archives/security-announce/2010//May/msg00001.html http://support.apple.com/kb/HT4171 http://lists.apple.com/archives/security-announce/2010//May/msg00002.html http://secunia.com/advisories/39819 http://support.apple.com/kb/HT4170 http://www.vupen.com/english/advisories/2010/1191 http://www.vupen.com/english/advisories/2010/1454 http://www.redhat.com/support/errata/RHSA-2010-0471.html http://www.vupen.com/english/advisories/2010/1793 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 http://secunia.com/advisories/40545 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html http://www.vmware.com/security/advisories/VMSA-2011-0003.html http://secunia.com/advisories/43308 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html http://marc.info/?l=bugtraq&m=134254866602253&w=2 http://marc.info/?l=bugtraq&m=127557596201693&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/57346 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13923 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10482 http://www.securityfocus.com/archive/1/516397/100/0/threaded http://www.securityfocus.com/archive/1/510534/100/0/threaded https://nvd.nist.gov https://usn.ubuntu.com/923-1/https://www.exploit-db.com/exploits/15056/

CVE-2010-0838

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect