CVE-2010-0842

01.04.2010, 16:30

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	7.5 UNKNOWN	NETWORK	LOW	AV:N/AC:L/Au:N/C:P/I:P/A:P
oracle	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 99%

Vendor	Product	Version
sun	jre	𝑥 ≤ 1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jdk	𝑥 ≤ 1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	𝑥 ≤ 1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	sdk	𝑥 ≤ 1.4.2_25
sun	sdk	1.4.2
sun	sdk	1.4.2_1:_1
sun	sdk	1.4.2_02:_02
sun	sdk	1.4.2_3:_3
sun	sdk	1.4.2_4:_4
sun	sdk	1.4.2_5:_5
sun	sdk	1.4.2_6:_6
sun	sdk	1.4.2_7:_7
sun	sdk	1.4.2_8:_8
sun	sdk	1.4.2_9:_9
sun	sdk	1.4.2_10:_10
sun	sdk	1.4.2_11:_11
sun	sdk	1.4.2_12:_12
sun	sdk	1.4.2_13:_13
sun	sdk	1.4.2_14:_14
sun	sdk	1.4.2_15:_15
sun	sdk	1.4.2_16:_16
sun	sdk	1.4.2_17:_17
sun	sdk	1.4.2_18:_18
sun	sdk	1.4.2_19:_19
sun	sdk	1.4.2_20:_20
sun	sdk	1.4.2_21:_21
sun	sdk	1.4.2_22:_22
sun	sdk	1.4.2_23:_23
sun	sdk	1.4.2_24:_24
sun	jre	𝑥 ≤ 1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	𝑥 ≤ 1.4.2_25
sun	jre	1.4.2
sun	jre	1.4.2_1:_1
sun	jre	1.4.2_2:_2
sun	jre	1.4.2_3:_3
sun	jre	1.4.2_4:_4
sun	jre	1.4.2_5:_5
sun	jre	1.4.2_6:_6
sun	jre	1.4.2_7:_7
sun	jre	1.4.2_8:_8
sun	jre	1.4.2_9:_9
sun	jre	1.4.2_10:_10
sun	jre	1.4.2_11:_11
sun	jre	1.4.2_12:_12
sun	jre	1.4.2_13:_13
sun	jre	1.4.2_14:_14
sun	jre	1.4.2_15:_15
sun	jre	1.4.2_16:_16
sun	jre	1.4.2_17:_17
sun	jre	1.4.2_18:_18
sun	jre	1.4.2_19:_19
sun	jre	1.4.2_20:_20
sun	jre	1.4.2_21:_21
sun	jre	1.4.2_22:_22
sun	jre	1.4.2_23:_23
sun	jre	1.4.2_24:_24
sun	jdk	𝑥 ≤ 1.3.1_27
sun	jdk	1.3.0
sun	jdk	1.3.0_01:_01
sun	jdk	1.3.0_02:_02
sun	jdk	1.3.0_03:_03
sun	jdk	1.3.0_04:_04
sun	jdk	1.3.0_05:_05
sun	jdk	1.3.1
sun	jdk	1.3.1_01:_01
sun	jdk	1.3.1_01a:_01a
sun	jdk	1.3.1_02:_02
sun	jdk	1.3.1_03:_03
sun	jdk	1.3.1_04:_04
sun	jdk	1.3.1_05:_05
sun	jdk	1.3.1_06:_06
sun	jdk	1.3.1_07:_07
sun	jdk	1.3.1_08:_08
sun	jdk	1.3.1_09:_09
sun	jdk	1.3.1_10:_10
sun	jdk	1.3.1_11:_11
sun	jdk	1.3.1_12:_12
sun	jdk	1.3.1_13:_13
sun	jdk	1.3.1_14:_14
sun	jdk	1.3.1_15:_15
sun	jdk	1.3.1_16:_16
sun	jdk	1.3.1_17:_17
sun	jdk	1.3.1_18:_18
sun	jdk	1.3.1_19:_19
sun	jdk	1.3.1_20:_20
sun	jdk	1.3.1_21:_21
sun	jdk	1.3.1_22:_22
sun	jdk	1.3.1_23:_23
sun	jdk	1.3.1_24:_24
sun	jdk	1.3.1_25:_25
sun	jdk	1.3.1_26:_26
sun	jre	𝑥 ≤ 1.3.1_27
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.1
sun	jre	1.3.1
sun	jre	1.3.1
sun	jre	1.3.1_2:_2
sun	jre	1.3.1_03:_03
sun	jre	1.3.1_04:_04
sun	jre	1.3.1_05:_05
sun	jre	1.3.1_06:_06
sun	jre	1.3.1_07:_07
sun	jre	1.3.1_08:_08
sun	jre	1.3.1_09:_09
sun	jre	1.3.1_10:_10
sun	jre	1.3.1_11:_11
sun	jre	1.3.1_12:_12
sun	jre	1.3.1_13:_13
sun	jre	1.3.1_14:_14
sun	jre	1.3.1_15:_15
sun	jre	1.3.1_16:_16
sun	jre	1.3.1_17:_17
sun	jre	1.3.1_18:_18
sun	jre	1.3.1_19:_19
sun	jre	1.3.1_20:_20
sun	jre	1.3.1_21:_21
sun	jre	1.3.1_22:_22
sun	jre	1.3.1_23:_23
sun	jre	1.3.1_24:_24
sun	jre	1.3.1_25:_25
sun	jre	1.3.1_26:_26
sun	sdk	𝑥 ≤ 1.3.1_27
sun	sdk	1.3.0
sun	sdk	1.3.0_01:_01
sun	sdk	1.3.0_02:_02
sun	sdk	1.3.0_03:_03
sun	sdk	1.3.0_04:_04
sun	sdk	1.3.0_05:_05
sun	sdk	1.3.1
sun	sdk	1.3.1_01:_01
sun	sdk	1.3.1_01a:_01a
sun	sdk	1.3.1_02:_02
sun	sdk	1.3.1_03:_03
sun	sdk	1.3.1_04:_04
sun	sdk	1.3.1_05:_05
sun	sdk	1.3.1_06:_06
sun	sdk	1.3.1_07:_07
sun	sdk	1.3.1_08:_08
sun	sdk	1.3.1_09:_09
sun	sdk	1.3.1_10:_10
sun	sdk	1.3.1_11:_11
sun	sdk	1.3.1_12:_12
sun	sdk	1.3.1_13:_13
sun	sdk	1.3.1_14:_14
sun	sdk	1.3.1_15:_15
sun	sdk	1.3.1_16:_16
sun	sdk	1.3.1_17:_17
sun	sdk	1.3.1_18:_18
sun	sdk	1.3.1_19:_19
sun	sdk	1.3.1_20:_20
sun	sdk	1.3.1_21:_21
sun	sdk	1.3.1_22:_22
sun	sdk	1.3.1_23:_23
sun	sdk	1.3.1_24:_24
sun	sdk	1.3.1_25:_25
sun	sdk	1.3.1_26:_26

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

openjdk-6

natty	not-affected
maverick	not-affected
lucid	not-affected
karmic	not-affected
jaunty	not-affected
intrepid	ignored
hardy	not-affected
dapper	dne

sun-java5

natty	dne
maverick	dne
lucid	dne
karmic	dne
jaunty	ignored
intrepid	ignored
hardy	ignored
dapper	ignored

sun-java6

natty	not-affected
maverick	not-affected
lucid	not-affected
karmic	Fixed 6.20dlj-0ubuntu1.9.10 released
jaunty	Fixed 6.20dlj-0ubuntu1.9.04 released
intrepid	ignored
hardy	Fixed 6.20dlj-0ubuntu1.8.04.1 released
dapper	dne