CVE-2010-3561: High severity Sun Java Runtime Environment (JRE) vulnerability
Published Oct 19, 2010
·Updated
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.
Affected Software
93 affected components
Sun Java Runtime Environment (JRE)<=1.6.0
Sun Java Runtime Environment (JRE)=1.6.0
Sun Java Runtime Environment (JRE)=1.6.0-update_1
Sun Java Runtime Environment (JRE)=1.6.0-update_10
Sun Java Runtime Environment (JRE)=1.6.0-update_11
Sun Java Runtime Environment (JRE)=1.6.0-update_12
Sun Java Runtime Environment (JRE)=1.6.0-update_13
Sun Java Runtime Environment (JRE)=1.6.0-update_14
Sun Java Runtime Environment (JRE)=1.6.0-update_15
Sun Java Runtime Environment (JRE)=1.6.0-update_16
Sun Java Runtime Environment (JRE)=1.6.0-update_17
Sun Java Runtime Environment (JRE)=1.6.0-update_18
Sun Java Runtime Environment (JRE)=1.6.0-update_19
Sun Java Runtime Environment (JRE)=1.6.0-update_2
Sun Java Runtime Environment (JRE)=1.6.0-update_20
Sun Java Runtime Environment (JRE)=1.6.0-update_3
Sun Java Runtime Environment (JRE)=1.6.0-update_4
Sun Java Runtime Environment (JRE)=1.6.0-update_5
Sun Java Runtime Environment (JRE)=1.6.0-update_6
Sun Java Runtime Environment (JRE)=1.6.0-update_7
Java Development Kit (JDK)<=1.6.0
Java Development Kit (JDK)=1.6.0
Java Development Kit (JDK)=1.6.0-update_10
Java Development Kit (JDK)=1.6.0-update_11
Java Development Kit (JDK)=1.6.0-update_12
Java Development Kit (JDK)=1.6.0-update_13
Java Development Kit (JDK)=1.6.0-update_14
Java Development Kit (JDK)=1.6.0-update_15
Java Development Kit (JDK)=1.6.0-update_16
Java Development Kit (JDK)=1.6.0-update_17
Java Development Kit (JDK)=1.6.0-update_18
Java Development Kit (JDK)=1.6.0-update_19
Java Development Kit (JDK)=1.6.0-update_20
Java Development Kit (JDK)=1.6.0-update_3
Java Development Kit (JDK)=1.6.0-update_4
Java Development Kit (JDK)=1.6.0-update_5
Java Development Kit (JDK)=1.6.0-update_6
Java Development Kit (JDK)=1.6.0-update_7
Java Development Kit (JDK)=1.6.0-update1
Java Development Kit (JDK)=1.6.0-update1_b06
Java Development Kit (JDK)=1.6.0-update2
Java Development Kit (JDK)<=1.5.0
Java Development Kit (JDK)=1.5.0
Java Development Kit (JDK)=1.5.0-update1
Java Development Kit (JDK)=1.5.0-update10
Java Development Kit (JDK)=1.5.0-update11
Java Development Kit (JDK)=1.5.0-update12
Java Development Kit (JDK)=1.5.0-update13
Java Development Kit (JDK)=1.5.0-update14
Java Development Kit (JDK)=1.5.0-update15
Java Development Kit (JDK)=1.5.0-update16
Java Development Kit (JDK)=1.5.0-update17
Java Development Kit (JDK)=1.5.0-update18
Java Development Kit (JDK)=1.5.0-update19
Java Development Kit (JDK)=1.5.0-update2
Java Development Kit (JDK)=1.5.0-update20
Java Development Kit (JDK)=1.5.0-update21
Java Development Kit (JDK)=1.5.0-update22
Java Development Kit (JDK)=1.5.0-update23
Java Development Kit (JDK)=1.5.0-update24
Java Development Kit (JDK)=1.5.0-update3
Java Development Kit (JDK)=1.5.0-update4
Java Development Kit (JDK)=1.5.0-update5
Java Development Kit (JDK)=1.5.0-update6
Java Development Kit (JDK)=1.5.0-update7
Java Development Kit (JDK)=1.5.0-update8
Java Development Kit (JDK)=1.5.0-update9
Sun Java Runtime Environment (JRE)<=1.5.0
Sun Java Runtime Environment (JRE)=1.5.0
Sun Java Runtime Environment (JRE)=1.5.0-update1
Sun Java Runtime Environment (JRE)=1.5.0-update10
Sun Java Runtime Environment (JRE)=1.5.0-update11
Sun Java Runtime Environment (JRE)=1.5.0-update12
Sun Java Runtime Environment (JRE)=1.5.0-update13
Sun Java Runtime Environment (JRE)=1.5.0-update14
Sun Java Runtime Environment (JRE)=1.5.0-update15
Sun Java Runtime Environment (JRE)=1.5.0-update16
Sun Java Runtime Environment (JRE)=1.5.0-update17
Sun Java Runtime Environment (JRE)=1.5.0-update18
Sun Java Runtime Environment (JRE)=1.5.0-update19
Sun Java Runtime Environment (JRE)=1.5.0-update2
Sun Java Runtime Environment (JRE)=1.5.0-update20
Sun Java Runtime Environment (JRE)=1.5.0-update21
Sun Java Runtime Environment (JRE)=1.5.0-update22
Sun Java Runtime Environment (JRE)=1.5.0-update23
Sun Java Runtime Environment (JRE)=1.5.0-update24
Sun Java Runtime Environment (JRE)=1.5.0-update3
Sun Java Runtime Environment (JRE)=1.5.0-update4
Sun Java Runtime Environment (JRE)=1.5.0-update5
Sun Java Runtime Environment (JRE)=1.5.0-update6
Sun Java Runtime Environment (JRE)=1.5.0-update7
Sun Java Runtime Environment (JRE)=1.5.0-update8
Sun Java Runtime Environment (JRE)=1.5.0-update9
Remediation
Event History
Oct 19, 2010
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3561?
CVE-2010-3561 has been evaluated to potentially impact confidentiality, integrity, and availability.
2
What software versions are affected by CVE-2010-3561?
CVE-2010-3561 affects Oracle Java SE and Java for Business versions 6 Update 21 and earlier, as well as version 5.0 Update 25.
3
How do I fix CVE-2010-3561?
To mitigate CVE-2010-3561, upgrade to a patched version of Oracle Java SE or Java for Business beyond version 6 Update 21.
4
Who can exploit CVE-2010-3561?
CVE-2010-3561 can be exploited by remote attackers, making it crucial for users to patch their software.
5
What types of attacks can result from CVE-2010-3561?
CVE-2010-3561 may allow attackers to execute arbitrary code, leading to system compromise.