CVE-2010-3708: Input Validation
The drools serialization format allows to embed class files. Upon deserialization those are loaded by the VM that runs the drools engine. If that (attacker-controlled) class files defines code in a static initializer it is executed during deserialization.
Other sources
The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3708?
CVE-2010-3708 has been assigned a moderate severity rating due to the risks associated with deserialization of attacker-controlled class files.
How do I fix CVE-2010-3708?
To mitigate CVE-2010-3708, upgrade to a patched version of the Red Hat JBoss Enterprise Application Platform or SOA Platform if you are using an affected version.
What are the affected products for CVE-2010-3708?
CVE-2010-3708 affects multiple versions of Red Hat JBoss Enterprise Application Platform and Red Hat JBoss Enterprise SOA Platform, specifically version 4.3.0 and its various patch levels.
What is the attack vector for CVE-2010-3708?
The attack vector for CVE-2010-3708 is via deserialization of malicious class files that can execute arbitrary code during the deserialization process.
Is CVE-2010-3708 relevant for production environments?
Yes, CVE-2010-3708 is particularly relevant for production environments using vulnerable versions of JBoss, as it poses a risk of remote code execution.