CVE-2010-0840
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
96.3%
Published
Apr 1, 2010
CISA due date
Jun 15, 2022
The record
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.11.b16.el5 |
| Red Hat:network_satellite:5.3::el4 | java-1.6.0-ibm | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:network_satellite:5.3::el4 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:network_satellite:5.3::el5 | java-1.6.0-ibm | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:network_satellite:5.3::el5 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm | 0 | 0:1.4.2.13.5-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.5-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.5-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.13.5-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.13.5-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.5-1jpp.1.el3 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm | 0 | 0:1.4.2.13.5-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.5-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.5-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.13.5-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.13.5-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.13.5-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.5-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm | 0 | 1:1.5.0.11.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-demo | 0 | 1:1.5.0.11.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-devel | 0 | 1:1.5.0.11.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.11.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.11.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.11.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-src | 0 | 1:1.5.0.11.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-sun-uninstall | 0 | 0:1.5.0.22-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-demo | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-src | 0 | 1:1.6.0.8-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun | 0 | 1:1.6.0.19-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-demo | 0 | 1:1.6.0.19-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-devel | 0 | 1:1.6.0.19-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.19-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-plugin | 0 | 1:1.6.0.19-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-src | 0 | 1:1.6.0.19-1jpp.1.el4 |
| Red Hat:rhel_extras:4.7.z | java-1.5.0-sun-uninstall | 0 | 0:1.5.0.22-1jpp.3.el4 |
| Red Hat:rhel_extras:5 | java-1.5.0-sun-uninstall | 0 | 0:1.5.0.22-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-accessibility | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-demo | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-devel | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-src | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-sun-uninstall | 0 | 0:1.5.0.22-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-demo | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-devel | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-src | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-demo | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-devel | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-plugin | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-src | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.5-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-accessibility | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-demo | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-devel | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-src | 0 | 1:1.5.0.11.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-sun-uninstall | 0 | 0:1.5.0.22-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-demo | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-devel | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-src | 0 | 1:1.6.0.8-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-demo | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-devel | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-plugin | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-src | 0 | 1:1.6.0.19-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-sap | 0 | 0:1.4.2.13.5.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-sap-demo | 0 | 0:1.4.2.13.5.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-sap-devel | 0 | 0:1.4.2.13.5.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-sap-javacomm | 0 | 0:1.4.2.13.5.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-sap-src | 0 | 0:1.4.2.13.5.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-sap | 0 | 0:1.4.2.13.5.sap-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-sap-demo | 0 | 0:1.4.2.13.5.sap-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-sap-devel | 0 | 0:1.4.2.13.5.sap-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-sap-javacomm | 0 | 0:1.4.2.13.5.sap-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-sap-src | 0 | 0:1.4.2.13.5.sap-1jpp.1.el5 |
Related vulnerabilities
- CVE-2016-5542 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-3458 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-3427 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… Also affects java-1.6.0-openjdk
- CVE-2016-0686 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-0483 Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65… Also affects java-1.6.0-openjdk
- CVE-2015-4734 Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2015-4748 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and… Also affects java-1.6.0-openjdk
- CVE-2015-2590 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… Also affects java-1.6.0-openjdk