CVE-2010-4467

JDK unspecified vulnerability in Deployment component

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 10.0 Critical EPSS 2.7% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Jdk and 1 more

CVE-2010-4468

JDK unspecified vulnerability in JDBC component

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to JDBC.

CVSS 2.0 · 4.0 Medium EPSS 2.0% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Jdk and 1 more

CVE-2010-4469

OpenJDK Hotspot verifier heap corruption (6878713)

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."

CVSS 2.0 · 10.0 Critical EPSS 2.9% KEV · Not listed

Vendors

Redhat Sun

Products

Enterprise Linux Rhel Extras Jdk and 2 more

CVE-2010-4470

OpenJDK JAXP untrusted component state manipulation (6927050)

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed

Vendors

Redhat Sun

Products

Enterprise Linux Rhel Extras Jdk and 1 more

CVE-2010-4471

OpenJDK Java2D font-related system property leak (6985453)

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to the exposure of system properties via vectors related to Font.createFont and exception text.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Jdk and 1 more

CVE-2010-4472

OpenJDK untrusted code allowed to replace DSIG/C14N implementation (6994263)

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue involves the replacement of the "XML DSig Transform or C14N algorithm implementations."

CVSS 2.0 · 2.6 Low EPSS 3.0% KEV · Not listed

Vendors

Redhat Sun

Products

Enterprise Linux Rhel Extras Jdk and 1 more

CVE-2010-4473

JDK unspecified vulnerability in Sound component

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4454 and CVE-2010-4462.

CVSS 2.0 · 10.0 Critical EPSS 5.5% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Rhel Extras Sap and 3 more

CVE-2010-4475

JDK unspecified vulnerability in Deployment component

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Deployment, a different vulnerability than CVE-2010-4447.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Rhel Extras Sap and 3 more

CVE-2010-4476

JDK Double.parseDouble Denial-Of-Service

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.

CVSS 2.0 · 5.0 Medium EPSS 23.5% KEV · Not listed

Vendors

Redhat Sun

Products

Enterprise Linux Jboss Enterprise Application Platform Jboss Enterprise Portal Platform and 9 more

CVE-2011-0311

IBM JDK Class file parsing denial-of-service

The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.

CVSS 2.0 · 3.5 Low EPSS 1.8% KEV · Not listed

Vendors

Ibm Redhat

Products

Java Runtimes For Java Technology Rhel Extras and 1 more

CVE-2011-0558

flash-plugin: multiple code execution flaws (APSB11-02)

Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0559

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an unspecified ActionScript method that cause a parameter to be used as an object pointer, a different vulnerability than CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0560

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 6.3% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0561

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 6.3% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0562

acroread: critical APSB11-03

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0570 and CVE-2011-0588.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Adobe Microsoft Redhat

Products

Acrobat Acrobat Reader Windows and 1 more

CVE-2011-0563

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606.

CVSS 2.0 · 9.3 Critical EPSS 4.3% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0565

acroread: critical APSB11-03

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0585.

CVSS 2.0 · 9.3 Critical EPSS 5.7% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0566

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0567 and CVE-2011-0603.

CVSS 2.0 · 9.3 Critical EPSS 7.9% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0567

acroread: critical APSB11-03

AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image that triggers an incorrect pointer calculation, leading to heap memory corruption, a different vulnerability than CVE-2011-0566 and CVE-2011-0603.

CVSS 2.0 · 9.3 Critical EPSS 40.3% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0571

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras