CVE-2010-3557

19.10.2010, 22:00

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of "behavior and state of certain JDK classes" and "mutable static."

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	6.8 UNKNOWN	NETWORK	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P
oracle	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 90%

Vendor	Product	Version
sun	jre	𝑥 ≤ 1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jre	1.6.0
sun	jdk	𝑥 ≤ 1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	1.6.0
sun	jdk	𝑥 ≤ 1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	jdk	1.5.0
sun	sdk	𝑥 ≤ 1.4.2_27
sun	sdk	1.4.2
sun	sdk	1.4.2_1:_1
sun	sdk	1.4.2_02:_02
sun	sdk	1.4.2_3:_3
sun	sdk	1.4.2_4:_4
sun	sdk	1.4.2_5:_5
sun	sdk	1.4.2_6:_6
sun	sdk	1.4.2_7:_7
sun	sdk	1.4.2_8:_8
sun	sdk	1.4.2_9:_9
sun	sdk	1.4.2_10:_10
sun	sdk	1.4.2_11:_11
sun	sdk	1.4.2_12:_12
sun	sdk	1.4.2_13:_13
sun	sdk	1.4.2_14:_14
sun	sdk	1.4.2_15:_15
sun	sdk	1.4.2_16:_16
sun	sdk	1.4.2_17:_17
sun	sdk	1.4.2_18:_18
sun	sdk	1.4.2_19:_19
sun	sdk	1.4.2_20:_20
sun	sdk	1.4.2_21:_21
sun	sdk	1.4.2_22:_22
sun	sdk	1.4.2_23:_23
sun	sdk	1.4.2_24:_24
sun	sdk	1.4.2_25:_25
sun	sdk	1.4.2_26:_26
sun	jre	𝑥 ≤ 1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	1.5.0
sun	jre	𝑥 ≤ 1.4.2_27
sun	jre	1.4.2
sun	jre	1.4.2_1:_1
sun	jre	1.4.2_2:_2
sun	jre	1.4.2_3:_3
sun	jre	1.4.2_4:_4
sun	jre	1.4.2_5:_5
sun	jre	1.4.2_6:_6
sun	jre	1.4.2_7:_7
sun	jre	1.4.2_8:_8
sun	jre	1.4.2_9:_9
sun	jre	1.4.2_10:_10
sun	jre	1.4.2_11:_11
sun	jre	1.4.2_12:_12
sun	jre	1.4.2_13:_13
sun	jre	1.4.2_14:_14
sun	jre	1.4.2_15:_15
sun	jre	1.4.2_16:_16
sun	jre	1.4.2_17:_17
sun	jre	1.4.2_18:_18
sun	jre	1.4.2_19:_19
sun	jre	1.4.2_20:_20
sun	jre	1.4.2_21:_21
sun	jre	1.4.2_22:_22
sun	jre	1.4.2_23:_23
sun	jre	1.4.2_24:_24
sun	jre	1.4.2_25:_25
sun	jre	1.4.2_26:_26
sun	jdk	𝑥 ≤ 1.3.1_28
sun	jdk	1.3.0
sun	jdk	1.3.0_01:_01
sun	jdk	1.3.0_02:_02
sun	jdk	1.3.0_03:_03
sun	jdk	1.3.0_04:_04
sun	jdk	1.3.0_05:_05
sun	jdk	1.3.1
sun	jdk	1.3.1_01:_01
sun	jdk	1.3.1_01a:_01a
sun	jdk	1.3.1_02:_02
sun	jdk	1.3.1_03:_03
sun	jdk	1.3.1_04:_04
sun	jdk	1.3.1_05:_05
sun	jdk	1.3.1_06:_06
sun	jdk	1.3.1_07:_07
sun	jdk	1.3.1_08:_08
sun	jdk	1.3.1_09:_09
sun	jdk	1.3.1_10:_10
sun	jdk	1.3.1_11:_11
sun	jdk	1.3.1_12:_12
sun	jdk	1.3.1_13:_13
sun	jdk	1.3.1_14:_14
sun	jdk	1.3.1_15:_15
sun	jdk	1.3.1_16:_16
sun	jdk	1.3.1_17:_17
sun	jdk	1.3.1_18:_18
sun	jdk	1.3.1_19:_19
sun	jdk	1.3.1_20:_20
sun	jdk	1.3.1_21:_21
sun	jdk	1.3.1_22:_22
sun	jdk	1.3.1_23:_23
sun	jdk	1.3.1_24:_24
sun	jdk	1.3.1_25:_25
sun	jdk	1.3.1_26:_26
sun	jdk	1.3.1_27:_27
sun	jre	𝑥 ≤ 1.3.1_28
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.0
sun	jre	1.3.1
sun	jre	1.3.1
sun	jre	1.3.1
sun	jre	1.3.1_2:_2
sun	jre	1.3.1_03:_03
sun	jre	1.3.1_04:_04
sun	jre	1.3.1_05:_05
sun	jre	1.3.1_06:_06
sun	jre	1.3.1_07:_07
sun	jre	1.3.1_08:_08
sun	jre	1.3.1_09:_09
sun	jre	1.3.1_10:_10
sun	jre	1.3.1_11:_11
sun	jre	1.3.1_12:_12
sun	jre	1.3.1_13:_13
sun	jre	1.3.1_14:_14
sun	jre	1.3.1_15:_15
sun	jre	1.3.1_16:_16
sun	jre	1.3.1_17:_17
sun	jre	1.3.1_18:_18
sun	jre	1.3.1_19:_19
sun	jre	1.3.1_20:_20
sun	jre	1.3.1_21:_21
sun	jre	1.3.1_22:_22
sun	jre	1.3.1_23:_23
sun	jre	1.3.1_24:_24
sun	jre	1.3.1_25:_25
sun	jre	1.3.1_26:_26
sun	jre	1.3.1_27:_27
sun	sdk	𝑥 ≤ 1.3.1_28
sun	sdk	1.3.0
sun	sdk	1.3.0_01:_01
sun	sdk	1.3.0_02:_02
sun	sdk	1.3.0_03:_03
sun	sdk	1.3.0_04:_04
sun	sdk	1.3.0_05:_05
sun	sdk	1.3.1
sun	sdk	1.3.1_01:_01
sun	sdk	1.3.1_01a:_01a
sun	sdk	1.3.1_02:_02
sun	sdk	1.3.1_03:_03
sun	sdk	1.3.1_04:_04
sun	sdk	1.3.1_05:_05
sun	sdk	1.3.1_06:_06
sun	sdk	1.3.1_07:_07
sun	sdk	1.3.1_08:_08
sun	sdk	1.3.1_09:_09
sun	sdk	1.3.1_10:_10
sun	sdk	1.3.1_11:_11
sun	sdk	1.3.1_12:_12
sun	sdk	1.3.1_13:_13
sun	sdk	1.3.1_14:_14
sun	sdk	1.3.1_15:_15
sun	sdk	1.3.1_16:_16
sun	sdk	1.3.1_17:_17
sun	sdk	1.3.1_18:_18
sun	sdk	1.3.1_19:_19
sun	sdk	1.3.1_20:_20
sun	sdk	1.3.1_21:_21
sun	sdk	1.3.1_22:_22
sun	sdk	1.3.1_23:_23
sun	sdk	1.3.1_24:_24
sun	sdk	1.3.1_25:_25
sun	sdk	1.3.1_26:_26
sun	sdk	1.3.1_27:_27

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

openjdk-6

maverick	Fixed 6b20-1.9.1-1ubuntu3 released
lucid	Fixed 1.8.2-4ubuntu2 released
karmic	Fixed 1.8.2-4ubuntu1~9.10.1 released
jaunty	Fixed 1.8.2-4ubuntu1~9.04.1 released
hardy	Fixed 1.8.2-4ubuntu1~8.04.1 released
dapper	dne

openjdk-6b18

maverick	Fixed 6b18-1.8.2-4ubuntu1 released
lucid	not-affected
karmic	not-affected
intrepid	dne
hardy	dne
dapper	dne

sun-java6

maverick	Fixed 6.22-0ubuntu1~10.10 released
lucid	Fixed 6.22-0ubuntu1~10.04 released
karmic	Fixed 6.22-0ubuntu19.10.1 released
jaunty	Fixed 6.22-0ubuntu19.04.1 released
hardy	Fixed 6.22-0ubuntu18.04.1 released
dapper	dne