CVE-2010-0840

KEV

Published: Apr 01, 2010 Last Modified: Ott 22, 2025

ExploitDB:

Other exploit source:

Google Dorks:

CRITICAL 9,8

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

HIGH 7,5

Source: [email protected]

Access Vector: network

Access Complexity: low

Authentication: none

Confidentiality: partial

Integrity: partial

Availability: partial

Description

AI Translation Available

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) 'a similar trust issue with interfaces,' aka 'Trusted Methods Chaining Remote Code Execution Vulnerability.'

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,9219

Percentile

1,0th

Updated

EPSS Score Trend (Last 90 Days)

Exploit

Java - 'Statement.invoke()' Trusted Method Chain (Metasploit)

Verified Metasploit Framework (MSF)

Java - 'Statement.invoke()' Trusted Method Chain (Metasploit)

Author: Metasploit Published: Status: Verified

View Exploit Code →

Operating System

Opensuse by Opensuse

Product Information

Vendor Opensuse

Product Opensuse

Version 11.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Jre by Oracle

Product Information

Vendor Oracle

Product Jre

Version 1.6.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:oracle:jre:1.6.0:update18:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 8.10

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Jre by Oracle

Product Information

Vendor Oracle

Product Jre

Version 1.5.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:oracle:jre:1.5.0:update23:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 8.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Opensuse by Opensuse

Product Information

Vendor Opensuse

Product Opensuse

Version 11.2

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 9.10

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Jre by Oracle

Product Information

Vendor Oracle

Product Jre

Version 1.4.2_25

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:oracle:jre:1.4.2_25:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 9.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Opensuse by Opensuse

Product Information

Vendor Opensuse

Product Opensuse

Version 11.1

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://www.cisa.gov/known-exploited-vulnerabilities-catalo…

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010…

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c…

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751

http://lists.apple.com/archives/security-announce/2010//May…

http://lists.apple.com/archives/security-announce/2010//May/msg00001.html

http://lists.apple.com/archives/security-announce/2010//May…

http://lists.apple.com/archives/security-announce/2010//May/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2010-0…

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2010-0…

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2010-0…

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html

http://marc.info/?l=bugtraq&m=127557596201693&w=2

http://marc.info/?l=bugtraq&m=134254866602253&w=2

http://secunia.com/advisories/39292

http://secunia.com/advisories/39317

http://secunia.com/advisories/39659

http://secunia.com/advisories/39819

http://secunia.com/advisories/40211

http://secunia.com/advisories/40545

http://secunia.com/advisories/43308

https://oval.cisecurity.org/repository/search/definition/ov…

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…

https://oval.cisecurity.org/repository/search/definition/ov…

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…

http://support.apple.com/kb/HT4170

http://support.apple.com/kb/HT4171

http://ubuntu.com/usn/usn-923-1

http://www.mandriva.com/security/advisories?name=MDVSA-2010…

http://www.mandriva.com/security/advisories?name=MDVSA-2010:084

http://www.oracle.com/technetwork/topics/security/cpuoct201…

http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

http://www.oracle.com/technetwork/topics/security/javacpuma…

http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html

http://www.redhat.com/support/errata/RHSA-2010-0337.html

http://www.redhat.com/support/errata/RHSA-2010-0338.html

http://www.redhat.com/support/errata/RHSA-2010-0339.html

http://www.redhat.com/support/errata/RHSA-2010-0383.html

http://www.redhat.com/support/errata/RHSA-2010-0471.html

http://www.redhat.com/support/errata/RHSA-2010-0489.html

http://www.securityfocus.com/archive/1/510528/100/0/threaded

http://www.securityfocus.com/archive/1/516397/100/0/threaded

http://www.securityfocus.com/bid/39065

http://www.vmware.com/security/advisories/VMSA-2011-0003.ht…

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_…

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

http://www.vupen.com/english/advisories/2010/1107

http://www.vupen.com/english/advisories/2010/1191

http://www.vupen.com/english/advisories/2010/1454

http://www.vupen.com/english/advisories/2010/1523

http://www.vupen.com/english/advisories/2010/1793

http://www.zerodayinitiative.com/advisories/ZDI-10-056

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c…

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751

http://lists.apple.com/archives/security-announce/2010//May…

http://lists.apple.com/archives/security-announce/2010//May/msg00001.html

http://lists.apple.com/archives/security-announce/2010//May…

http://lists.apple.com/archives/security-announce/2010//May/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2010-0…

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2010-0…

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2010-0…

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html

http://marc.info/?l=bugtraq&m=127557596201693&w=2

http://marc.info/?l=bugtraq&m=134254866602253&w=2

http://secunia.com/advisories/39292

http://secunia.com/advisories/39317

http://secunia.com/advisories/39659

http://secunia.com/advisories/39819

http://secunia.com/advisories/40211

http://secunia.com/advisories/40545

http://secunia.com/advisories/43308

https://oval.cisecurity.org/repository/search/definition/ov…

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…

https://oval.cisecurity.org/repository/search/definition/ov…

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…

http://support.apple.com/kb/HT4170

http://support.apple.com/kb/HT4171

http://ubuntu.com/usn/usn-923-1

http://www.mandriva.com/security/advisories?name=MDVSA-2010…

http://www.mandriva.com/security/advisories?name=MDVSA-2010:084

http://www.oracle.com/technetwork/topics/security/cpuoct201…

http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

http://www.oracle.com/technetwork/topics/security/javacpuma…

http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html

http://www.redhat.com/support/errata/RHSA-2010-0337.html

http://www.redhat.com/support/errata/RHSA-2010-0338.html

http://www.redhat.com/support/errata/RHSA-2010-0339.html

http://www.redhat.com/support/errata/RHSA-2010-0383.html

http://www.redhat.com/support/errata/RHSA-2010-0471.html

http://www.redhat.com/support/errata/RHSA-2010-0489.html

http://www.securityfocus.com/archive/1/510528/100/0/threaded

http://www.securityfocus.com/archive/1/516397/100/0/threaded

http://www.securityfocus.com/bid/39065

http://www.vmware.com/security/advisories/VMSA-2011-0003.ht…

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_…

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

http://www.vupen.com/english/advisories/2010/1107

http://www.vupen.com/english/advisories/2010/1191

http://www.vupen.com/english/advisories/2010/1454

http://www.vupen.com/english/advisories/2010/1523

http://www.vupen.com/english/advisories/2010/1793

http://www.zerodayinitiative.com/advisories/ZDI-10-056

CVE-2010-0840

Description

EPSS (Exploit Prediction Scoring System)

EPSS (Exploit Prediction Scoring System)

EPSS Score Trend (Last 90 Days)

Java - 'Statement.invoke()' Trusted Method Chain (Metasploit)

Opensuse by Opensuse

Product Information

Jre by Oracle

Product Information

Ubuntu Linux by Canonical

Product Information

Jre by Oracle

Product Information

Ubuntu Linux by Canonical

Product Information

Opensuse by Opensuse

Product Information

Ubuntu Linux by Canonical

Product Information

Jre by Oracle

Product Information

Ubuntu Linux by Canonical

Product Information

Opensuse by Opensuse

Product Information

Iscriviti alla newsletter