CVE-2010-0840criticalunder attack

CVE-2010-0840

Published · Updated

Follow this CVE+ Monitor Java Runtime Environment

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 96%
from disclosure to weapon258 days
Published on NVDApr 1
1st PoC+258d
metasploitMar 31
CISA KEV+4437d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
20 products (594 components)
Red Hat Enterprise Linux Server Supplementary (v. 5) · Red Hat Enterprise Linux AS version 4 Extras · Red Hat Enterprise Linux Desktop Supplementary (v. 5) · Red Hat Enterprise Linux ES version 4 Extras · Red Hat Enterprise Linux WS version 4 Extras · and others 15
fix ↗
Action required by CISAfederal deadline: 2022-06-15

Apply updates per vendor instructions.

In short

A flaw in Java Runtime Environment allowed attackers to run malicious code on computers running vulnerable Java versions. This happened because Java did not properly verify that certain trusted methods were actually safe to execute, letting attackers trick the system into running their commands.

Technical detail

The vulnerability stems from improper validation of privileged method execution in JRE, where untrusted objects extending trusted classes or implementing trusted interfaces could bypass security checks. Remote attackers could exploit this via specially crafted objects to achieve arbitrary code execution with the privileges of the JRE process, affecting confidentiality, integrity, and availability across Java SE versions 6 Update 18, 5.0 Update 23, and 1.4.2_25.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.