CVE Vulnerabilities

CVE-2010-3566

Published: Oct 19, 2010 | Modified: Oct 10, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow that leads to a buffer overflow via a crafted devs (device information) tag structure in a color profile.

Affected Software

Name Vendor Start Version End Version
Jre Sun * 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0

References