CVE-2010-4422: High severity sun java runtime environment (jre) vulnerability

Q: What is the severity of CVE-2010-4422?

CVE-2010-4422 has a critical severity rating due to its potential impact on confidentiality, integrity, and availability.

Q: How can I fix CVE-2010-4422?

To fix CVE-2010-4422, update your Java Runtime Environment to the latest version released after Java SE 6 Update 23.

Q: What affected software is listed for CVE-2010-4422?

CVE-2010-4422 affects Oracle Java SE and Java for Business versions prior to 6 Update 23.

Q: What vectors are related to CVE-2010-4422?

CVE-2010-4422 relates to unknown vectors concerning Deployment within the Java Runtime Environment.

Q: Is there a workaround for CVE-2010-4422?

There are no specific workarounds recommended for CVE-2010-4422 other than upgrading to a fixed version.

Published Feb 17, 2011

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected Software

45 affected components

Sun Java Runtime Environment (JRE)<=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0-update_1

Sun Java Runtime Environment (JRE)=1.6.0-update_10

Sun Java Runtime Environment (JRE)=1.6.0-update_11

Sun Java Runtime Environment (JRE)=1.6.0-update_12

Sun Java Runtime Environment (JRE)=1.6.0-update_13

Sun Java Runtime Environment (JRE)=1.6.0-update_14

Sun Java Runtime Environment (JRE)=1.6.0-update_15

Sun Java Runtime Environment (JRE)=1.6.0-update_16

Sun Java Runtime Environment (JRE)=1.6.0-update_17

Sun Java Runtime Environment (JRE)=1.6.0-update_18

Sun Java Runtime Environment (JRE)=1.6.0-update_19

Sun Java Runtime Environment (JRE)=1.6.0-update_2

Sun Java Runtime Environment (JRE)=1.6.0-update_20

Sun Java Runtime Environment (JRE)=1.6.0-update_21

Sun Java Runtime Environment (JRE)=1.6.0-update_22

Sun Java Runtime Environment (JRE)=1.6.0-update_3

Sun Java Runtime Environment (JRE)=1.6.0-update_4

Sun Java Runtime Environment (JRE)=1.6.0-update_5

Sun Java Runtime Environment (JRE)=1.6.0-update_6

Sun Java Runtime Environment (JRE)=1.6.0-update_7

Java Development Kit (JDK)<=1.6.0

Java Development Kit (JDK)=1.6.0

Java Development Kit (JDK)=1.6.0-update_10

Java Development Kit (JDK)=1.6.0-update_11

Java Development Kit (JDK)=1.6.0-update_12

Java Development Kit (JDK)=1.6.0-update_13

Java Development Kit (JDK)=1.6.0-update_14

Java Development Kit (JDK)=1.6.0-update_15

Java Development Kit (JDK)=1.6.0-update_16

Java Development Kit (JDK)=1.6.0-update_17

Java Development Kit (JDK)=1.6.0-update_18

Java Development Kit (JDK)=1.6.0-update_19

Java Development Kit (JDK)=1.6.0-update_20

Java Development Kit (JDK)=1.6.0-update_21

Java Development Kit (JDK)=1.6.0-update_22

Java Development Kit (JDK)=1.6.0-update_3

Java Development Kit (JDK)=1.6.0-update_4

Java Development Kit (JDK)=1.6.0-update_5

Java Development Kit (JDK)=1.6.0-update_6

Java Development Kit (JDK)=1.6.0-update_7

Java Development Kit (JDK)=1.6.0-update1

Java Development Kit (JDK)=1.6.0-update1_b06

Java Development Kit (JDK)=1.6.0-update2

Event History

Feb 17, 2011

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4422?

CVE-2010-4422 has a critical severity rating due to its potential impact on confidentiality, integrity, and availability.

How can I fix CVE-2010-4422?

To fix CVE-2010-4422, update your Java Runtime Environment to the latest version released after Java SE 6 Update 23.

What affected software is listed for CVE-2010-4422?

CVE-2010-4422 affects Oracle Java SE and Java for Business versions prior to 6 Update 23.

What vectors are related to CVE-2010-4422?

CVE-2010-4422 relates to unknown vectors concerning Deployment within the Java Runtime Environment.

Is there a workaround for CVE-2010-4422?