CVE-2010-3573: Medium severity Sun JRE vulnerability
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-3573?
The severity of CVE-2010-3573 is considered high due to potential impacts on confidentiality, integrity, and availability.
How do I fix CVE-2010-3573?
To fix CVE-2010-3573, users should update to the latest version of Java provided by their vendor.
Which versions of Java are affected by CVE-2010-3573?
CVE-2010-3573 affects Oracle Java SE and Java for Business version 6 Update 21 and 5.0 Update 25, among others.
Can CVE-2010-3573 be exploited remotely?
Yes, CVE-2010-3573 can be exploited remotely by attackers through unpatched Java installations.
What are the potential impacts of CVE-2010-3573?
The potential impacts of CVE-2010-3573 include unauthorized access to sensitive data and disruption of services.