CVE-2010-3554 Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity...

HighCVSS 10.0 EPSS 4.9%

Published: 2010-10-20 00:00
Updated: 2026-06-17 02:22
Exploit status: No public exploit known

Description

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to "permissions granted to certain system objects."

Affected products

Product	Affected versions	Fixed in
sun jre	<= 1.6.0	No fix listed
sun jre	= 1.6.0	No fix listed
sun jre	= 1.6.0-update_1	No fix listed
sun jre	= 1.6.0-update_10	No fix listed
sun jre	= 1.6.0-update_11	No fix listed
sun jre	= 1.6.0-update_12	No fix listed
sun jre	= 1.6.0-update_13	No fix listed
sun jre	= 1.6.0-update_14	No fix listed
sun jre	= 1.6.0-update_15	No fix listed
sun jre	= 1.6.0-update_16	No fix listed
sun jre	= 1.6.0-update_17	No fix listed
sun jre	= 1.6.0-update_18	No fix listed
sun jre	= 1.6.0-update_19	No fix listed
sun jre	= 1.6.0-update_2	No fix listed
sun jre	= 1.6.0-update_20	No fix listed
sun jre	= 1.6.0-update_3	No fix listed
sun jre	= 1.6.0-update_4	No fix listed
sun jre	= 1.6.0-update_5	No fix listed
sun jre	= 1.6.0-update_6	No fix listed
sun jre	= 1.6.0-update_7	No fix listed
sun jre	<= 1.5.0	No fix listed
sun jre	= 1.5.0	No fix listed
sun jre	= 1.5.0-update1	No fix listed
sun jre	= 1.5.0-update10	No fix listed
sun jre	= 1.5.0-update11	No fix listed

Show 175 more

Product	Affected versions	Fixed in
sun jre	= 1.5.0-update12	No fix listed
sun jre	= 1.5.0-update13	No fix listed
sun jre	= 1.5.0-update14	No fix listed
sun jre	= 1.5.0-update15	No fix listed
sun jre	= 1.5.0-update16	No fix listed
sun jre	= 1.5.0-update17	No fix listed
sun jre	= 1.5.0-update18	No fix listed
sun jre	= 1.5.0-update19	No fix listed
sun jre	= 1.5.0-update2	No fix listed
sun jre	= 1.5.0-update20	No fix listed
sun jre	= 1.5.0-update21	No fix listed
sun jre	= 1.5.0-update22	No fix listed
sun jre	= 1.5.0-update23	No fix listed
sun jre	= 1.5.0-update24	No fix listed
sun jre	= 1.5.0-update3	No fix listed
sun jre	= 1.5.0-update4	No fix listed
sun jre	= 1.5.0-update5	No fix listed
sun jre	= 1.5.0-update6	No fix listed
sun jre	= 1.5.0-update7	No fix listed
sun jre	= 1.5.0-update8	No fix listed
sun jre	= 1.5.0-update9	No fix listed
sun jre	<= 1.4.2_27	No fix listed
sun jre	= 1.4.2	No fix listed
sun jre	= 1.4.2_1	No fix listed
sun jre	= 1.4.2_2	No fix listed
sun jre	= 1.4.2_3	No fix listed
sun jre	= 1.4.2_4	No fix listed
sun jre	= 1.4.2_5	No fix listed
sun jre	= 1.4.2_6	No fix listed
sun jre	= 1.4.2_7	No fix listed
sun jre	= 1.4.2_8	No fix listed
sun jre	= 1.4.2_9	No fix listed
sun jre	= 1.4.2_10	No fix listed
sun jre	= 1.4.2_11	No fix listed
sun jre	= 1.4.2_12	No fix listed
sun jre	= 1.4.2_13	No fix listed
sun jre	= 1.4.2_14	No fix listed
sun jre	= 1.4.2_15	No fix listed
sun jre	= 1.4.2_16	No fix listed
sun jre	= 1.4.2_17	No fix listed
sun jre	= 1.4.2_18	No fix listed
sun jre	= 1.4.2_19	No fix listed
sun jre	= 1.4.2_20	No fix listed
sun jre	= 1.4.2_21	No fix listed
sun jre	= 1.4.2_22	No fix listed
sun jre	= 1.4.2_23	No fix listed
sun jre	= 1.4.2_24	No fix listed
sun jre	= 1.4.2_25	No fix listed
sun jre	= 1.4.2_26	No fix listed
sun jre	<= 1.3.1_28	No fix listed
sun jre	= 1.3.0	No fix listed
sun jre	= 1.3.0-update1	No fix listed
sun jre	= 1.3.0-update2	No fix listed
sun jre	= 1.3.0-update3	No fix listed
sun jre	= 1.3.0-update4	No fix listed
sun jre	= 1.3.0-update5	No fix listed
sun jre	= 1.3.1	No fix listed
sun jre	= 1.3.1-update1	No fix listed
sun jre	= 1.3.1-update2	No fix listed
sun jre	= 1.3.1_2	No fix listed
sun jre	= 1.3.1_03	No fix listed
sun jre	= 1.3.1_04	No fix listed
sun jre	= 1.3.1_05	No fix listed
sun jre	= 1.3.1_06	No fix listed
sun jre	= 1.3.1_07	No fix listed
sun jre	= 1.3.1_08	No fix listed
sun jre	= 1.3.1_09	No fix listed
sun jre	= 1.3.1_10	No fix listed
sun jre	= 1.3.1_11	No fix listed
sun jre	= 1.3.1_12	No fix listed
sun jre	= 1.3.1_13	No fix listed
sun jre	= 1.3.1_14	No fix listed
sun jre	= 1.3.1_15	No fix listed
sun jre	= 1.3.1_16	No fix listed
sun jre	= 1.3.1_17	No fix listed
sun jre	= 1.3.1_18	No fix listed
sun jre	= 1.3.1_19	No fix listed
sun jre	= 1.3.1_20	No fix listed
sun jre	= 1.3.1_21	No fix listed
sun jre	= 1.3.1_22	No fix listed
sun jre	= 1.3.1_23	No fix listed
sun jre	= 1.3.1_24	No fix listed
sun jre	= 1.3.1_25	No fix listed
sun jre	= 1.3.1_26	No fix listed
sun jre	= 1.3.1_27	No fix listed
sun jdk	<= 1.6.0	No fix listed
sun jdk	= 1.6.0	No fix listed
sun jdk	= 1.6.0-update_10	No fix listed
sun jdk	= 1.6.0-update_11	No fix listed
sun jdk	= 1.6.0-update_12	No fix listed
sun jdk	= 1.6.0-update_13	No fix listed
sun jdk	= 1.6.0-update_14	No fix listed
sun jdk	= 1.6.0-update_15	No fix listed
sun jdk	= 1.6.0-update_16	No fix listed
sun jdk	= 1.6.0-update_17	No fix listed
sun jdk	= 1.6.0-update_18	No fix listed
sun jdk	= 1.6.0-update_19	No fix listed
sun jdk	= 1.6.0-update_20	No fix listed
sun jdk	= 1.6.0-update_3	No fix listed
sun jdk	= 1.6.0-update_4	No fix listed
sun jdk	= 1.6.0-update_5	No fix listed
sun jdk	= 1.6.0-update_6	No fix listed
sun jdk	= 1.6.0-update_7	No fix listed
sun jdk	= 1.6.0-update1	No fix listed
sun jdk	= 1.6.0-update1_b06	No fix listed
sun jdk	= 1.6.0-update2	No fix listed
sun jdk	<= 1.5.0	No fix listed
sun jdk	= 1.5.0	No fix listed
sun jdk	= 1.5.0-update1	No fix listed
sun jdk	= 1.5.0-update10	No fix listed
sun jdk	= 1.5.0-update11	No fix listed
sun jdk	= 1.5.0-update12	No fix listed
sun jdk	= 1.5.0-update13	No fix listed
sun jdk	= 1.5.0-update14	No fix listed
sun jdk	= 1.5.0-update15	No fix listed
sun jdk	= 1.5.0-update16	No fix listed
sun jdk	= 1.5.0-update17	No fix listed
sun jdk	= 1.5.0-update18	No fix listed
sun jdk	= 1.5.0-update19	No fix listed
sun jdk	= 1.5.0-update2	No fix listed
sun jdk	= 1.5.0-update20	No fix listed
sun jdk	= 1.5.0-update21	No fix listed
sun jdk	= 1.5.0-update22	No fix listed
sun jdk	= 1.5.0-update23	No fix listed
sun jdk	= 1.5.0-update24	No fix listed
sun jdk	= 1.5.0-update3	No fix listed
sun jdk	= 1.5.0-update4	No fix listed
sun jdk	= 1.5.0-update5	No fix listed
sun jdk	= 1.5.0-update6	No fix listed
sun jdk	= 1.5.0-update7	No fix listed
sun jdk	= 1.5.0-update8	No fix listed
sun jdk	= 1.5.0-update9	No fix listed
sun jdk	<= 1.3.1_28	No fix listed
sun jdk	= 1.3.0	No fix listed
sun jdk	= 1.3.0_01	No fix listed
sun jdk	= 1.3.0_02	No fix listed
sun jdk	= 1.3.0_03	No fix listed
sun jdk	= 1.3.0_04	No fix listed
sun jdk	= 1.3.0_05	No fix listed
sun jdk	= 1.3.1	No fix listed
sun jdk	= 1.3.1_01	No fix listed
sun jdk	= 1.3.1_01a	No fix listed
sun jdk	= 1.3.1_02	No fix listed
sun jdk	= 1.3.1_03	No fix listed
sun jdk	= 1.3.1_04	No fix listed
sun jdk	= 1.3.1_05	No fix listed
sun jdk	= 1.3.1_06	No fix listed
sun jdk	= 1.3.1_07	No fix listed
sun jdk	= 1.3.1_08	No fix listed
sun jdk	= 1.3.1_09	No fix listed
sun jdk	= 1.3.1_10	No fix listed
sun jdk	= 1.3.1_11	No fix listed
sun jdk	= 1.3.1_12	No fix listed
sun jdk	= 1.3.1_13	No fix listed
sun jdk	= 1.3.1_14	No fix listed
sun jdk	= 1.3.1_15	No fix listed
sun jdk	= 1.3.1_16	No fix listed
sun jdk	= 1.3.1_17	No fix listed
sun jdk	= 1.3.1_18	No fix listed
sun jdk	= 1.3.1_19	No fix listed
sun jdk	= 1.3.1_20	No fix listed
sun jdk	= 1.3.1_21	No fix listed
sun jdk	= 1.3.1_22	No fix listed
sun jdk	= 1.3.1_23	No fix listed
sun jdk	= 1.3.1_24	No fix listed
sun jdk	= 1.3.1_25	No fix listed
sun jdk	= 1.3.1_26	No fix listed
sun jdk	= 1.3.1_27	No fix listed
sun sdk	<= 1.4.2_27	No fix listed
sun sdk	= 1.4.2	No fix listed
sun sdk	= 1.4.2_1	No fix listed
sun sdk	= 1.4.2_02	No fix listed
sun sdk	= 1.4.2_3	No fix listed
sun sdk	= 1.4.2_4	No fix listed
sun sdk	= 1.4.2_5	No fix listed

References

SSRT100333 vendor-advisory
FEDORA-2010-16312 vendor-advisory
FEDORA-2010-16294 vendor-advisory
FEDORA-2010-16240 vendor-advisory
SUSE-SR:2010:019 vendor-advisory
HPSBMU02799 vendor-advisory
41972 third-party-advisory vendor-advisory
42377 third-party-advisory vendor-advisory
42974 third-party-advisory vendor-advisory
GLSA-201406-32 vendor-advisory
support.avaya.com
support.avaya.com
support.avaya.com
www.hitachi.co.jp
www.oracle.com
www.oracle.com patch vendor-advisory
RHSA-2010:0768 vendor-advisory
RHSA-2010:0770 vendor-advisory
RHSA-2010:0865 vendor-advisory
20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
43994 vdb-entry
USN-1010-1 vendor-advisory
www.vmware.com
ADV-2010-3086 vdb-entry vendor-advisory
bugzilla.redhat.com
oval:org.mitre.oval:def:12189 signature vdb-entry
oval:org.mitre.oval:def:12449 signature vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 4.90% (percentile 92.2)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.