Back to the CVE list
CVE-2010-0840 CISA KEV · Actively exploited

OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)

CVSS score

7.5

EPSS probability

%96.3

Risk score

14.4

Published

16 y ago

OverviewPublic Exploits (1)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2010-0840 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2010-0840 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Red Hat3AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.i386 View
2Red Hat3AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.ia64 View
3Red Hat3AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.ppc View
4Red Hat3AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.s390 View
5Red Hat3AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.s390x View
6Red Hat3AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
7Red Hat3AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.i386 View
8Red Hat3AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.ia64 View
9Red Hat3AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.ppc View
10Red Hat3AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.s390 View
11Red Hat3AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.s390x View
12Red Hat3AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
13Red Hat3AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.i386 View
14Red Hat3AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.ia64 View
15Red Hat3AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.ppc View
16Red Hat3AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.s390 View
17Red Hat3AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.s390x View
18Red Hat3AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
19Red Hat3AS-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el3.i386 View
20Red Hat3AS-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el3.ppc View
21Red Hat3AS-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el3.s390 View
22Red Hat3AS-LACD:java-1.4.2-ibm-plugin-0:1.4.2.13.5-1jpp.1.el3.i386 View
23Red Hat3AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.i386 View
24Red Hat3AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.ia64 View
25Red Hat3AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.ppc View
26Red Hat3AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.s390 View
27Red Hat3AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.s390x View
28Red Hat3AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
29Red Hat3Desktop-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.i386 View
30Red Hat3Desktop-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
31Red Hat3Desktop-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.i386 View
32Red Hat3Desktop-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
33Red Hat3Desktop-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.i386 View
34Red Hat3Desktop-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
35Red Hat3Desktop-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el3.i386 View
36Red Hat3Desktop-LACD:java-1.4.2-ibm-plugin-0:1.4.2.13.5-1jpp.1.el3.i386 View
37Red Hat3Desktop-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.i386 View
38Red Hat3Desktop-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
39Red Hat3ES-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.i386 View
40Red Hat3ES-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.ia64 View
41Red Hat3ES-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
42Red Hat3ES-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.i386 View
43Red Hat3ES-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.ia64 View
44Red Hat3ES-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
45Red Hat3ES-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.i386 View
46Red Hat3ES-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.ia64 View
47Red Hat3ES-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
48Red Hat3ES-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el3.i386 View
49Red Hat3ES-LACD:java-1.4.2-ibm-plugin-0:1.4.2.13.5-1jpp.1.el3.i386 View
50Red Hat3ES-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.i386 View
51Red Hat3ES-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.ia64 View
52Red Hat3ES-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
53Red Hat3WS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.i386 View
54Red Hat3WS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.ia64 View
55Red Hat3WS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
56Red Hat3WS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.i386 View
57Red Hat3WS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.ia64 View
58Red Hat3WS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
59Red Hat3WS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.i386 View
60Red Hat3WS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.ia64 View
61Red Hat3WS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
62Red Hat3WS-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el3.i386 View
63Red Hat3WS-LACD:java-1.4.2-ibm-plugin-0:1.4.2.13.5-1jpp.1.el3.i386 View
64Red Hat3WS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.i386 View
65Red Hat3WS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.ia64 View
66Red Hat3WS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el3.x86_64 View
67Red Hat4AS-4.7.z-LACD:java-1.5.0-sun-uninstall-0:1.5.0.22-1jpp.3.el4.i586 View
68Red Hat4AS-4.7.z-LACD:java-1.5.0-sun-uninstall-0:1.5.0.22-1jpp.3.el4.x86_64 View
69Red Hat4AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4.i386 View
70Red Hat4AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4.ia64 View
71Red Hat4AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4.ppc View
72Red Hat4AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4.ppc64 View
73Red Hat4AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4.s390 View
74Red Hat4AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4.s390x View
75Red Hat4AS-LACD:java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4.x86_64 View
76Red Hat4AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el4.i386 View
77Red Hat4AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el4.ia64 View
78Red Hat4AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el4.ppc View
79Red Hat4AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el4.ppc64 View
80Red Hat4AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el4.s390 View
81Red Hat4AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el4.s390x View
82Red Hat4AS-LACD:java-1.4.2-ibm-demo-0:1.4.2.13.5-1jpp.1.el4.x86_64 View
83Red Hat4AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el4.i386 View
84Red Hat4AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el4.ia64 View
85Red Hat4AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el4.ppc View
86Red Hat4AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el4.ppc64 View
87Red Hat4AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el4.s390 View
88Red Hat4AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el4.s390x View
89Red Hat4AS-LACD:java-1.4.2-ibm-devel-0:1.4.2.13.5-1jpp.1.el4.x86_64 View
90Red Hat4AS-LACD:java-1.4.2-ibm-javacomm-0:1.4.2.13.5-1jpp.1.el4.i386 View
91Red Hat4AS-LACD:java-1.4.2-ibm-javacomm-0:1.4.2.13.5-1jpp.1.el4.ppc View
92Red Hat4AS-LACD:java-1.4.2-ibm-javacomm-0:1.4.2.13.5-1jpp.1.el4.ppc64 View
93Red Hat4AS-LACD:java-1.4.2-ibm-javacomm-0:1.4.2.13.5-1jpp.1.el4.x86_64 View
94Red Hat4AS-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el4.i386 View
95Red Hat4AS-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el4.ppc View
96Red Hat4AS-LACD:java-1.4.2-ibm-jdbc-0:1.4.2.13.5-1jpp.1.el4.s390 View
97Red Hat4AS-LACD:java-1.4.2-ibm-plugin-0:1.4.2.13.5-1jpp.1.el4.i386 View
98Red Hat4AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el4.i386 View
99Red Hat4AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el4.ia64 View
100Red Hat4AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el4.ppc View
101Red Hat4AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el4.ppc64 View
102Red Hat4AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el4.s390 View
103Red Hat4AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el4.s390x View
104Red Hat4AS-LACD:java-1.4.2-ibm-src-0:1.4.2.13.5-1jpp.1.el4.x86_64 View
105Red Hat4AS-LACD:java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4.i386 View
106Red Hat4AS-LACD:java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4.ppc View
107Red Hat4AS-LACD:java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4.ppc64 View
108Red Hat4AS-LACD:java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4.s390 View
109Red Hat4AS-LACD:java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4.s390x View
110Red Hat4AS-LACD:java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4.x86_64 View
111Red Hat4AS-LACD:java-1.5.0-ibm-demo-1:1.5.0.11.2-1jpp.1.el4.i386 View
112Red Hat4AS-LACD:java-1.5.0-ibm-demo-1:1.5.0.11.2-1jpp.1.el4.ppc View
113Red Hat4AS-LACD:java-1.5.0-ibm-demo-1:1.5.0.11.2-1jpp.1.el4.ppc64 View
114Red Hat4AS-LACD:java-1.5.0-ibm-demo-1:1.5.0.11.2-1jpp.1.el4.s390 View
115Red Hat4AS-LACD:java-1.5.0-ibm-demo-1:1.5.0.11.2-1jpp.1.el4.s390x View
116Red Hat4AS-LACD:java-1.5.0-ibm-demo-1:1.5.0.11.2-1jpp.1.el4.x86_64 View
117Red Hat4AS-LACD:java-1.5.0-ibm-devel-1:1.5.0.11.2-1jpp.1.el4.i386 View
118Red Hat4AS-LACD:java-1.5.0-ibm-devel-1:1.5.0.11.2-1jpp.1.el4.ppc View
119Red Hat4AS-LACD:java-1.5.0-ibm-devel-1:1.5.0.11.2-1jpp.1.el4.ppc64 View
120Red Hat4AS-LACD:java-1.5.0-ibm-devel-1:1.5.0.11.2-1jpp.1.el4.s390 View
121Red Hat4AS-LACD:java-1.5.0-ibm-devel-1:1.5.0.11.2-1jpp.1.el4.s390x View
122Red Hat4AS-LACD:java-1.5.0-ibm-devel-1:1.5.0.11.2-1jpp.1.el4.x86_64 View
123Red Hat4AS-LACD:java-1.5.0-ibm-javacomm-1:1.5.0.11.2-1jpp.1.el4.i386 View
124Red Hat4AS-LACD:java-1.5.0-ibm-javacomm-1:1.5.0.11.2-1jpp.1.el4.ppc View
125Red Hat4AS-LACD:java-1.5.0-ibm-javacomm-1:1.5.0.11.2-1jpp.1.el4.ppc64 View
126Red Hat4AS-LACD:java-1.5.0-ibm-javacomm-1:1.5.0.11.2-1jpp.1.el4.x86_64 View
127Red Hat4AS-LACD:java-1.5.0-ibm-jdbc-1:1.5.0.11.2-1jpp.1.el4.i386 View
128Red Hat4AS-LACD:java-1.5.0-ibm-jdbc-1:1.5.0.11.2-1jpp.1.el4.ppc View
129Red Hat4AS-LACD:java-1.5.0-ibm-jdbc-1:1.5.0.11.2-1jpp.1.el4.s390 View
130Red Hat4AS-LACD:java-1.5.0-ibm-plugin-1:1.5.0.11.2-1jpp.1.el4.i386 View
131Red Hat4AS-LACD:java-1.5.0-ibm-plugin-1:1.5.0.11.2-1jpp.1.el4.ppc View
132Red Hat4AS-LACD:java-1.5.0-ibm-src-1:1.5.0.11.2-1jpp.1.el4.i386 View
133Red Hat4AS-LACD:java-1.5.0-ibm-src-1:1.5.0.11.2-1jpp.1.el4.ppc View
134Red Hat4AS-LACD:java-1.5.0-ibm-src-1:1.5.0.11.2-1jpp.1.el4.ppc64 View
135Red Hat4AS-LACD:java-1.5.0-ibm-src-1:1.5.0.11.2-1jpp.1.el4.s390 View
136Red Hat4AS-LACD:java-1.5.0-ibm-src-1:1.5.0.11.2-1jpp.1.el4.s390x View
137Red Hat4AS-LACD:java-1.5.0-ibm-src-1:1.5.0.11.2-1jpp.1.el4.x86_64 View
138Red Hat4AS-LACD:java-1.5.0-sun-uninstall-0:1.5.0.22-1jpp.3.el4.i586 View
139Red Hat4AS-LACD:java-1.5.0-sun-uninstall-0:1.5.0.22-1jpp.3.el4.x86_64 View
140Red Hat4AS-LACD:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.i386 View
141Red Hat4AS-LACD:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.ppc View
142Red Hat4AS-LACD:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.ppc64 View
143Red Hat4AS-LACD:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.s390 View
144Red Hat4AS-LACD:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.s390x View
145Red Hat4AS-LACD:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.x86_64 View
146Red Hat4AS-LACD:java-1.6.0-ibm-demo-1:1.6.0.8-1jpp.1.el4.i386 View
147Red Hat4AS-LACD:java-1.6.0-ibm-demo-1:1.6.0.8-1jpp.1.el4.ppc View
148Red Hat4AS-LACD:java-1.6.0-ibm-demo-1:1.6.0.8-1jpp.1.el4.ppc64 View
149Red Hat4AS-LACD:java-1.6.0-ibm-demo-1:1.6.0.8-1jpp.1.el4.s390 View
150Red Hat4AS-LACD:java-1.6.0-ibm-demo-1:1.6.0.8-1jpp.1.el4.s390x View
151Red Hat4AS-LACD:java-1.6.0-ibm-demo-1:1.6.0.8-1jpp.1.el4.x86_64 View
152Red Hat4AS-LACD:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.i386 View
153Red Hat4AS-LACD:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.ppc View
154Red Hat4AS-LACD:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.ppc64 View
155Red Hat4AS-LACD:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.s390 View
156Red Hat4AS-LACD:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.s390x View
157Red Hat4AS-LACD:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.x86_64 View
158Red Hat4AS-LACD:java-1.6.0-ibm-javacomm-1:1.6.0.8-1jpp.1.el4.i386 View
159Red Hat4AS-LACD:java-1.6.0-ibm-javacomm-1:1.6.0.8-1jpp.1.el4.ppc View
160Red Hat4AS-LACD:java-1.6.0-ibm-javacomm-1:1.6.0.8-1jpp.1.el4.ppc64 View
161Red Hat4AS-LACD:java-1.6.0-ibm-javacomm-1:1.6.0.8-1jpp.1.el4.x86_64 View
162Red Hat4AS-LACD:java-1.6.0-ibm-jdbc-1:1.6.0.8-1jpp.1.el4.i386 View
163Red Hat4AS-LACD:java-1.6.0-ibm-jdbc-1:1.6.0.8-1jpp.1.el4.ppc View
164Red Hat4AS-LACD:java-1.6.0-ibm-jdbc-1:1.6.0.8-1jpp.1.el4.ppc64 View
165Red Hat4AS-LACD:java-1.6.0-ibm-jdbc-1:1.6.0.8-1jpp.1.el4.s390 View
166Red Hat4AS-LACD:java-1.6.0-ibm-jdbc-1:1.6.0.8-1jpp.1.el4.s390x View
167Red Hat4AS-LACD:java-1.6.0-ibm-jdbc-1:1.6.0.8-1jpp.1.el4.x86_64 View
168Red Hat4AS-LACD:java-1.6.0-ibm-plugin-1:1.6.0.8-1jpp.1.el4.i386 View
169Red Hat4AS-LACD:java-1.6.0-ibm-plugin-1:1.6.0.8-1jpp.1.el4.ppc View
170Red Hat4AS-LACD:java-1.6.0-ibm-plugin-1:1.6.0.8-1jpp.1.el4.x86_64 View
171Red Hat4AS-LACD:java-1.6.0-ibm-src-1:1.6.0.8-1jpp.1.el4.i386 View
172Red Hat4AS-LACD:java-1.6.0-ibm-src-1:1.6.0.8-1jpp.1.el4.ppc View
173Red Hat4AS-LACD:java-1.6.0-ibm-src-1:1.6.0.8-1jpp.1.el4.ppc64 View
174Red Hat4AS-LACD:java-1.6.0-ibm-src-1:1.6.0.8-1jpp.1.el4.s390 View
175Red Hat4AS-LACD:java-1.6.0-ibm-src-1:1.6.0.8-1jpp.1.el4.s390x View
176Red Hat4AS-LACD:java-1.6.0-ibm-src-1:1.6.0.8-1jpp.1.el4.x86_64 View
177Red Hat4AS-LACD:java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4.i586 View
178Red Hat4AS-LACD:java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4.x86_64 View
179Red Hat4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.19-1jpp.1.el4.i586 View
180Red Hat4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.19-1jpp.1.el4.x86_64 View
181Red Hat4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.19-1jpp.1.el4.i586 View
182Red Hat4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.19-1jpp.1.el4.x86_64 View
183Red Hat4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.19-1jpp.1.el4.i586 View
184Red Hat4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.19-1jpp.1.el4.x86_64 View
185Red Hat4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.19-1jpp.1.el4.i586 View
186Red Hat4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.19-1jpp.1.el4.x86_64 View
187Red Hat4AS-LACD:java-1.6.0-sun-src-1:1.6.0.19-1jpp.1.el4.i586 View
188Red Hat4AS-LACD:java-1.6.0-sun-src-1:1.6.0.19-1jpp.1.el4.x86_64 View
189Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.i386 View
190Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.s390 View
191Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.s390x View
192Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.src View
193Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4.x86_64 View
194Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.i386 View
195Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.s390 View
196Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.s390x View
197Red Hat4AS-RHNSAT5.3:java-1.6.0-ibm-devel-1:1.6.0.8-1jpp.1.el4.x86_64 View
198Red Hat4AS-SAP:java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8.x86_64 View
199Red Hat4AS-SAP:java-1.4.2-ibm-sap-demo-0:1.4.2.13.5.sap-1jpp.1.el4_8.x86_64 View
200Red Hat4AS-SAP:java-1.4.2-ibm-sap-devel-0:1.4.2.13.5.sap-1jpp.1.el4_8.x86_64 View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Does this CVE affect my Red Hat product?

The results come directly from the Red Hat CSAF VEX product status; they are not estimates.

Fix released

Bu ürün dalı için Red Hat düzeltmesi yayımlanmış.

Red Hat fixes

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.5cvss_v2—AV:N/AC:L/Au:N/C:P/I:P/A:PRed Hat

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

16 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
redhat

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
redhat

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
redhat

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
redhat

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
redhat

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
redhat

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
redhat

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
reference

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
reference

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
reference

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
reference

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

CVE-2010-0840 : the database holds 1 public PoC/exploit sources for it. For direct links to the sources, open the Public Exploits tab.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2010-0840 is associated with the following CWEs:

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-20: Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2010-0840 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
Permissions—
User—

Official Sources and Advisories

Canonical URLvendor-advisoryRHBZ#575846vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2010-0840vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2010-0840vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryBefore applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259patchBefore applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259patchBefore applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259patchBefore applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259patchBefore applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259patch

CVSS Vector Radar Chart

7.5 / 10
Attack VectorNetworkComplexityLowPrivilegesHighUser Interact.RequiredConfidentialityLowIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

AV:N/AC:L/Au:N/C:P/I:P/A:P
Attack VectorNetwork
Attack ComplexityLow
Privileges Required—
User Interaction—
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)P
Availability (Erişilebilirlik)P

Yama doğrulandı

16 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

RH
Red Hat logo
Red Hat

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2010-0840"