CVE-2010-3565 Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availab...
HighCVSS 10.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow that triggers memory corruption via large values in a subsample of a JPEG image, related to JPEGImageWriter.writeImage in the imageio API.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | <= 1.6.0 | No fix listed |
| sun jre | = 1.6.0 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_10 | No fix listed |
| sun jre | = 1.6.0-update_11 | No fix listed |
| sun jre | = 1.6.0-update_12 | No fix listed |
| sun jre | = 1.6.0-update_13 | No fix listed |
| sun jre | = 1.6.0-update_14 | No fix listed |
| sun jre | = 1.6.0-update_15 | No fix listed |
| sun jre | = 1.6.0-update_16 | No fix listed |
| sun jre | = 1.6.0-update_17 | No fix listed |
| sun jre | = 1.6.0-update_18 | No fix listed |
| sun jre | = 1.6.0-update_19 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun jre | = 1.6.0-update_20 | No fix listed |
| sun jre | = 1.6.0-update_3 | No fix listed |
| sun jre | = 1.6.0-update_4 | No fix listed |
| sun jre | = 1.6.0-update_5 | No fix listed |
| sun jre | = 1.6.0-update_6 | No fix listed |
| sun jre | = 1.6.0-update_7 | No fix listed |
| sun jre | <= 1.5.0 | No fix listed |
| sun jre | = 1.5.0 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
Show 124 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.5.0-update12 | No fix listed |
| sun jre | = 1.5.0-update13 | No fix listed |
| sun jre | = 1.5.0-update14 | No fix listed |
| sun jre | = 1.5.0-update15 | No fix listed |
| sun jre | = 1.5.0-update16 | No fix listed |
| sun jre | = 1.5.0-update17 | No fix listed |
| sun jre | = 1.5.0-update18 | No fix listed |
| sun jre | = 1.5.0-update19 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update20 | No fix listed |
| sun jre | = 1.5.0-update21 | No fix listed |
| sun jre | = 1.5.0-update22 | No fix listed |
| sun jre | = 1.5.0-update23 | No fix listed |
| sun jre | = 1.5.0-update24 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun jre | <= 1.4.2_27 | No fix listed |
| sun jre | = 1.4.2 | No fix listed |
| sun jre | = 1.4.2_1 | No fix listed |
| sun jre | = 1.4.2_2 | No fix listed |
| sun jre | = 1.4.2_3 | No fix listed |
| sun jre | = 1.4.2_4 | No fix listed |
| sun jre | = 1.4.2_5 | No fix listed |
| sun jre | = 1.4.2_6 | No fix listed |
| sun jre | = 1.4.2_7 | No fix listed |
| sun jre | = 1.4.2_8 | No fix listed |
| sun jre | = 1.4.2_9 | No fix listed |
| sun jre | = 1.4.2_10 | No fix listed |
| sun jre | = 1.4.2_11 | No fix listed |
| sun jre | = 1.4.2_12 | No fix listed |
| sun jre | = 1.4.2_13 | No fix listed |
| sun jre | = 1.4.2_14 | No fix listed |
| sun jre | = 1.4.2_15 | No fix listed |
| sun jre | = 1.4.2_16 | No fix listed |
| sun jre | = 1.4.2_17 | No fix listed |
| sun jre | = 1.4.2_18 | No fix listed |
| sun jre | = 1.4.2_19 | No fix listed |
| sun jre | = 1.4.2_20 | No fix listed |
| sun jre | = 1.4.2_21 | No fix listed |
| sun jre | = 1.4.2_22 | No fix listed |
| sun jre | = 1.4.2_23 | No fix listed |
| sun jre | = 1.4.2_24 | No fix listed |
| sun jre | = 1.4.2_25 | No fix listed |
| sun jre | = 1.4.2_26 | No fix listed |
| sun jdk | <= 1.6.0 | No fix listed |
| sun jdk | = 1.6.0 | No fix listed |
| sun jdk | = 1.6.0-update_10 | No fix listed |
| sun jdk | = 1.6.0-update_11 | No fix listed |
| sun jdk | = 1.6.0-update_12 | No fix listed |
| sun jdk | = 1.6.0-update_13 | No fix listed |
| sun jdk | = 1.6.0-update_14 | No fix listed |
| sun jdk | = 1.6.0-update_15 | No fix listed |
| sun jdk | = 1.6.0-update_16 | No fix listed |
| sun jdk | = 1.6.0-update_17 | No fix listed |
| sun jdk | = 1.6.0-update_18 | No fix listed |
| sun jdk | = 1.6.0-update_19 | No fix listed |
| sun jdk | = 1.6.0-update_20 | No fix listed |
| sun jdk | = 1.6.0-update_3 | No fix listed |
| sun jdk | = 1.6.0-update_4 | No fix listed |
| sun jdk | = 1.6.0-update_5 | No fix listed |
| sun jdk | = 1.6.0-update_6 | No fix listed |
| sun jdk | = 1.6.0-update_7 | No fix listed |
| sun jdk | = 1.6.0-update1 | No fix listed |
| sun jdk | = 1.6.0-update1_b06 | No fix listed |
| sun jdk | = 1.6.0-update2 | No fix listed |
| sun jdk | <= 1.5.0 | No fix listed |
| sun jdk | = 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update11 | No fix listed |
| sun jdk | = 1.5.0-update12 | No fix listed |
| sun jdk | = 1.5.0-update13 | No fix listed |
| sun jdk | = 1.5.0-update14 | No fix listed |
| sun jdk | = 1.5.0-update15 | No fix listed |
| sun jdk | = 1.5.0-update16 | No fix listed |
| sun jdk | = 1.5.0-update17 | No fix listed |
| sun jdk | = 1.5.0-update18 | No fix listed |
| sun jdk | = 1.5.0-update19 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update20 | No fix listed |
| sun jdk | = 1.5.0-update21 | No fix listed |
| sun jdk | = 1.5.0-update22 | No fix listed |
| sun jdk | = 1.5.0-update23 | No fix listed |
| sun jdk | = 1.5.0-update24 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update6 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
| sun sdk | <= 1.4.2_27 | No fix listed |
| sun sdk | = 1.4.2 | No fix listed |
| sun sdk | = 1.4.2_1 | No fix listed |
| sun sdk | = 1.4.2_02 | No fix listed |
| sun sdk | = 1.4.2_3 | No fix listed |
| sun sdk | = 1.4.2_4 | No fix listed |
| sun sdk | = 1.4.2_5 | No fix listed |
| sun sdk | = 1.4.2_6 | No fix listed |
| sun sdk | = 1.4.2_7 | No fix listed |
| sun sdk | = 1.4.2_8 | No fix listed |
| sun sdk | = 1.4.2_9 | No fix listed |
| sun sdk | = 1.4.2_10 | No fix listed |
| sun sdk | = 1.4.2_11 | No fix listed |
| sun sdk | = 1.4.2_12 | No fix listed |
| sun sdk | = 1.4.2_13 | No fix listed |
| sun sdk | = 1.4.2_14 | No fix listed |
| sun sdk | = 1.4.2_15 | No fix listed |
| sun sdk | = 1.4.2_16 | No fix listed |
| sun sdk | = 1.4.2_17 | No fix listed |
| sun sdk | = 1.4.2_18 | No fix listed |
| sun sdk | = 1.4.2_19 | No fix listed |
| sun sdk | = 1.4.2_20 | No fix listed |
| sun sdk | = 1.4.2_21 | No fix listed |
| sun sdk | = 1.4.2_22 | No fix listed |
| sun sdk | = 1.4.2_23 | No fix listed |
| sun sdk | = 1.4.2_24 | No fix listed |
| sun sdk | = 1.4.2_25 | No fix listed |
| sun sdk | = 1.4.2_26 | No fix listed |
References
- SSRT100333 vendor-advisory
- FEDORA-2010-16312 vendor-advisory
- FEDORA-2010-16294 vendor-advisory
- FEDORA-2010-16240 vendor-advisory
- SUSE-SR:2010:019 vendor-advisory
- SUSE-SA:2010:061 vendor-advisory
- HPSBMU02799 vendor-advisory
- 41967 third-party-advisory
- 41972 third-party-advisory
- 42974 third-party-advisory
- 44954 third-party-advisory
- GLSA-201406-32 vendor-advisory
- support.avaya.com
- support.avaya.com
- support.avaya.com
- www.oracle.com
- www.oracle.com patch vendor-advisory
- RHSA-2010:0768 vendor-advisory
- RHSA-2010:0770 vendor-advisory
- RHSA-2010:0786 vendor-advisory
- RHSA-2010:0807 vendor-advisory
- RHSA-2010:0865 vendor-advisory
- RHSA-2010:0873 vendor-advisory
- RHSA-2010:0986 vendor-advisory
- RHSA-2010:0987 vendor-advisory
- RHSA-2011:0880 vendor-advisory
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
- 43985 vdb-entry
- USN-1010-1 vendor-advisory
- www.vmware.com
- ADV-2010-2745 vdb-entry
- www.zerodayinitiative.com
- bugzilla.redhat.com
- oval:org.mitre.oval:def:12180 signature vdb-entry
- oval:org.mitre.oval:def:12294 signature vdb-entry