Strix
26.1K

CVE-2010-0843

UnknownEPSS 6.19%

Last modified

CVE-2010-0843 is a vulnerability of currently unknown severity. Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. EPSS estimates a 6.19% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute arbitrary code.

Metrics

EPSS Probability
6.19%

92.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
SunJdk1.5.0Update23
SunJdk1.6.0Update 18
SunJre1.3.1_27—
SunJre1.4.2_25—
SunJre1.5.0Update23
SunJre1.6.0Update 18
SunSdk1.3.1_27—
SunSdk1.4.2_25—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2010-0843?
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute arbitrary code.
How severe is CVE-2010-0843?
Severity scoring for CVE-2010-0843 is pending analysis. The EPSS model estimates a 6.19% probability of exploitation in the next 30 days.
How do I fix CVE-2010-0843?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-0843?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST