Vulnerability in Sun Jdk
CVE-2010-3555
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
EPSS: 0.080 (94.1th percentile) — read the EPSS interpretation.
Affected products
References
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (x_refsource_HP, vendor-advisory)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
- secalert_us@oracle.com (signature, x_refsource_OVAL, vdb-entry)
- secalert_us@oracle.com (x_refsource_HP, vendor-advisory)
- secalert_us@oracle.com (signature, x_refsource_OVAL, vdb-entry)
- secalert_us@oracle.com (x_refsource_MISC)
- secalert_us@oracle.com (vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
- secalert_us@oracle.com (x_refsource_SECUNIA, third-party-advisory)