First published: Fri May 21 2010(Updated: )
Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted applet.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Java 1.5 | =0-23 | |
macOS Yosemite | =10.5 | |
macOS Yosemite | =10.5.0 | |
macOS Yosemite | =10.5.1 | |
macOS Yosemite | =10.5.2 | |
macOS Yosemite | =10.5.3 | |
macOS Yosemite | =10.5.4 | |
macOS Yosemite | =10.5.5 | |
macOS Yosemite | =10.5.6 | |
Apple Java 1.6 | =0-17 | |
macOS Yosemite | =10.6 | |
macOS Yosemite | =10.6.0 | |
macOS Yosemite | =10.6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0539 is rated as a critical vulnerability due to its potential to allow remote code execution.
To fix CVE-2010-0539, users should update to Mac OS X 10.5 Update 7 or Java for Mac OS X 10.6 Update 2 or later.
CVE-2010-0539 can be exploited via crafted applets that trigger the integer signedness error in the Java implementation.
CVE-2010-0539 affects Apple Java versions 1.5 and 1.6 running on Mac OS X 10.5 and 10.6 prior to their respective updates.
Exploiting CVE-2010-0539 may lead to arbitrary code execution or denial of service through application crashes.