CVE-2010-3554

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Oracle Java SE是标准版的Java平台是一个Java2的平台，为用户提供一个程序开发环境。Java for Business是一套自定义的Java SE改版，企业可通过它快速访问关键修复，特点是长期支持和企业级定位。 Oracle Java SE和Java for Business 6 Update 21版本，5.0 Update 25版本，1.4.2_27版本以及1.3.1_28版本中的CORBA组件中存在远程安全漏洞。远程攻击者可借助未知的向量影响机密性，完整性和有效性。

CVE-2010-3554 affects n/a n/a. High exploitation probability; assess promptly. Oracle Java SE是标准版的Java平台是一个Java2的平台，为用户提供一个程序开发环境。Java for Business是一套自定义的Java SE改版，企业可通过它快速访问关键修复，特点是长期支持和企业级定位。 Oracle Java SE和Java for Business 6 Update 21版本，5.0 Update 25版本，1. CVE-2010-3554 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2010-3554

I. Basic Information for CVE-2010-3554

Affected Products

II. Public POCs for CVE-2010-3554

III. Intelligence Information for CVE-2010-3554

Vendor Advisories for CVE-2010-3554 (13)

• 🔗 Oracle Critical Patch Update - January 2011 Read full article x_refsource_CONFIRM
• https://bugzilla.redhat.com/show_bug.cgi?id=639880 x_refsource_CONFIRM
• http://www.vmware.com/security/advisories/VMSA-2011-0003.html x_refsource_CONFIRM
• http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html x_refsource_CONFIRM
• http://secunia.com/advisories/42377 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/41972 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42974 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/43994 vdb-entry x_refsource_BID
• http://www.vupen.com/english/advisories/2010/3086 vdb-entry x_refsource_VUPEN
• http://security.gentoo.org/glsa/glsa-201406-32.xml vendor-advisory x_refsource_GENTOO
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12189 vdb-entry signature x_refsource_OVAL
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12449 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/516397/100/0/threaded mailing-list x_refsource_BUGTRAQ

Mailing List Discussions for CVE-2010-3554 (5)

• http://marc.info/?l=bugtraq&m=134254866602253&w=2 vendor-advisory x_refsource_HP
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html vendor-advisory x_refsource_SUSE
• http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html vendor-advisory x_refsource_FEDORA
• http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html vendor-advisory x_refsource_FEDORA
• http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html vendor-advisory x_refsource_FEDORA

Other References for CVE-2010-3554 (8)

• http://support.avaya.com/css/P8/documents/100123193 x_refsource_CONFIRM
• http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html x_refsource_CONFIRM
• http://support.avaya.com/css/P8/documents/100114327 x_refsource_CONFIRM
• http://support.avaya.com/css/P8/documents/100114315 x_refsource_CONFIRM
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 vendor-advisory x_refsource_HP
• http://www.redhat.com/support/errata/RHSA-2010-0770.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-0865.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-0768.html vendor-advisory x_refsource_REDHAT

• https://www.cve.org/CVERecord?id=CVE-2010-3554

Same Patch Batch · n/a · 2010-10-19 · 48 CVEs total

Showing top 20 of 48 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2010-3554