Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1423
HistoryApr 15, 2010 - 9:30 p.m.

CVE-2010-1423

2010-04-1521:30:00
CWE-78
[email protected]
web.nvd.nist.gov
4

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.931

Percentile

99.1%

JSON

Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
oraclejdkRange≤1.6.0update19
OR
oraclejdkMatch1.6.0update10
OR
oraclejreRange≤1.6.0update19
OR
oraclejreMatch1.6.0update_10

Related

ubuntucve 1
cvelist 1
prion 1
cve 1
metasploit 1
openvas 3
nessus 2
checkpoint_advisories 1
exploitdb 1
threatpost 1
ubuntucve
ubuntucve
CVE-2010-1423
2010-04-15 00:00:00
cvelist
cvelist
CVE-2010-1423
2010-04-15 21:12:00
prion
prion
Design/Logic Flaw
2010-04-15 21:30:00
cve
cve
CVE-2010-1423
2010-04-15 21:30:00
metasploit
metasploit
Sun Java Web Start Plugin Command Line Argument Injection
2010-04-16 08:08:40
openvas
openvas
Sun Java JRE Multiple Vulnerabilities - Linux
2010-04-23 00:00:00
Sun Java Deployment Toolkit Multiple Vulnerabilities (Windows)
2010-04-23 00:00:00
Sun Java Deployment Toolkit Multiple Vulnerabilities - Windows
2010-04-23 00:00:00
nessus
nessus
Oracle Java JDK / JRE 6 < Update 20 Multiple Vulnerabilities
2010-04-15 00:00:00
Oracle Java JDK / JRE 6 < Update 20 Multiple Vulnerabilities (Unix)
2013-02-22 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle Java Web Start Launch Command-Line Injection (CVE-2010-0886; CVE-2010-0887; CVE-2010-1423)
2010-05-26 00:00:00
exploitdb
exploitdb
Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
2010-04-09 00:00:00
threatpost
threatpost
Popular Sports Site Goal.com Serves Malware
2011-05-03 19:05:02

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.931

Percentile

99.1%

JSON
Related for NVD:CVE-2010-1423
ubuntucve1cvelist1prion1cve1metasploit1openvas3nessus2checkpoint_advisories1exploitdb1threatpost1