CVE-2010-3570: High severity Sun Java Runtime Environment (JRE) vulnerability

Q: What is the severity of CVE-2010-3570?

CVE-2010-3570 has been classified as a moderate severity vulnerability that affects confidentiality, integrity, and availability.

Q: How do I fix CVE-2010-3570?

To fix CVE-2010-3570, users should update their Java SE or Java for Business versions to a secure version beyond 1.6.0-update_21.

Q: What software is affected by CVE-2010-3570?

CVE-2010-3570 affects multiple versions of Oracle Java SE and Java for Business, specifically including JRE and JDK versions up to 1.6.0-update_21.

Q: Can CVE-2010-3570 be exploited remotely?

Yes, CVE-2010-3570 allows remote attackers to exploit the vulnerability through unspecified vectors.

Q: What type of vulnerability is CVE-2010-3570?

CVE-2010-3570 is an unspecified vulnerability in the Deployment Toolkit component of Oracle Java.

Published Oct 19, 2010

Updated

Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

41 affected components

Sun Java Runtime Environment (JRE)<=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0-update_1

Sun Java Runtime Environment (JRE)=1.6.0-update_10

Sun Java Runtime Environment (JRE)=1.6.0-update_11

Sun Java Runtime Environment (JRE)=1.6.0-update_12

Sun Java Runtime Environment (JRE)=1.6.0-update_13

Sun Java Runtime Environment (JRE)=1.6.0-update_14

Sun Java Runtime Environment (JRE)=1.6.0-update_15

Sun Java Runtime Environment (JRE)=1.6.0-update_16

Sun Java Runtime Environment (JRE)=1.6.0-update_17

Sun Java Runtime Environment (JRE)=1.6.0-update_18

Sun Java Runtime Environment (JRE)=1.6.0-update_19

Sun Java Runtime Environment (JRE)=1.6.0-update_2

Sun Java Runtime Environment (JRE)=1.6.0-update_20

Sun Java Runtime Environment (JRE)=1.6.0-update_3

Sun Java Runtime Environment (JRE)=1.6.0-update_4

Sun Java Runtime Environment (JRE)=1.6.0-update_5

Sun Java Runtime Environment (JRE)=1.6.0-update_6

Sun Java Runtime Environment (JRE)=1.6.0-update_7

Java Development Kit (JDK)<=1.6.0

Java Development Kit (JDK)=1.6.0

Java Development Kit (JDK)=1.6.0-update_10

Java Development Kit (JDK)=1.6.0-update_11

Java Development Kit (JDK)=1.6.0-update_12

Java Development Kit (JDK)=1.6.0-update_13

Java Development Kit (JDK)=1.6.0-update_14

Java Development Kit (JDK)=1.6.0-update_15

Java Development Kit (JDK)=1.6.0-update_16

Java Development Kit (JDK)=1.6.0-update_17

Java Development Kit (JDK)=1.6.0-update_18

Java Development Kit (JDK)=1.6.0-update_19

Java Development Kit (JDK)=1.6.0-update_20

Java Development Kit (JDK)=1.6.0-update_3

Java Development Kit (JDK)=1.6.0-update_4

Java Development Kit (JDK)=1.6.0-update_5

Java Development Kit (JDK)=1.6.0-update_6

Java Development Kit (JDK)=1.6.0-update_7

Java Development Kit (JDK)=1.6.0-update1

Java Development Kit (JDK)=1.6.0-update1_b06

Java Development Kit (JDK)=1.6.0-update2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html

Event History

Oct 19, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3570?

CVE-2010-3570 has been classified as a moderate severity vulnerability that affects confidentiality, integrity, and availability.

How do I fix CVE-2010-3570?

To fix CVE-2010-3570, users should update their Java SE or Java for Business versions to a secure version beyond 1.6.0-update_21.

What software is affected by CVE-2010-3570?