CVE-2010-4451: High severity sun java runtime environment (jre) vulnerability

Q: What is the severity of CVE-2010-4451?

CVE-2010-4451 is considered a critical vulnerability that affects confidentiality, integrity, and availability.

Q: How do I fix CVE-2010-4451?

To fix CVE-2010-4451, update to the latest version of Oracle Java SE or Java for Business.

Q: What versions are affected by CVE-2010-4451?

CVE-2010-4451 affects Oracle Java SE and Java for Business versions 6 Update 23 and earlier.

Q: Can CVE-2010-4451 be exploited remotely?

Yes, CVE-2010-4451 allows remote attackers to exploit the vulnerability through unspecified vectors.

Q: What should I do if I cannot update my Java version to mitigate CVE-2010-4451?

If an update is not possible, consider disabling Java in your browser and applications until you can apply a patch.

Published Feb 17, 2011

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.

Affected Software

45 affected components

Sun Java Runtime Environment (JRE)<=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0-update_1

Sun Java Runtime Environment (JRE)=1.6.0-update_10

Sun Java Runtime Environment (JRE)=1.6.0-update_11

Sun Java Runtime Environment (JRE)=1.6.0-update_12

Sun Java Runtime Environment (JRE)=1.6.0-update_13

Sun Java Runtime Environment (JRE)=1.6.0-update_14

Sun Java Runtime Environment (JRE)=1.6.0-update_15

Sun Java Runtime Environment (JRE)=1.6.0-update_16

Sun Java Runtime Environment (JRE)=1.6.0-update_17

Sun Java Runtime Environment (JRE)=1.6.0-update_18

Sun Java Runtime Environment (JRE)=1.6.0-update_19

Sun Java Runtime Environment (JRE)=1.6.0-update_2

Sun Java Runtime Environment (JRE)=1.6.0-update_20

Sun Java Runtime Environment (JRE)=1.6.0-update_21

Sun Java Runtime Environment (JRE)=1.6.0-update_22

Sun Java Runtime Environment (JRE)=1.6.0-update_3

Sun Java Runtime Environment (JRE)=1.6.0-update_4

Sun Java Runtime Environment (JRE)=1.6.0-update_5

Sun Java Runtime Environment (JRE)=1.6.0-update_6

Sun Java Runtime Environment (JRE)=1.6.0-update_7

Java Development Kit (JDK)<=1.6.0

Java Development Kit (JDK)=1.6.0

Java Development Kit (JDK)=1.6.0-update_10

Java Development Kit (JDK)=1.6.0-update_11

Java Development Kit (JDK)=1.6.0-update_12

Java Development Kit (JDK)=1.6.0-update_13

Java Development Kit (JDK)=1.6.0-update_14

Java Development Kit (JDK)=1.6.0-update_15

Java Development Kit (JDK)=1.6.0-update_16

Java Development Kit (JDK)=1.6.0-update_17

Java Development Kit (JDK)=1.6.0-update_18

Java Development Kit (JDK)=1.6.0-update_19

Java Development Kit (JDK)=1.6.0-update_20

Java Development Kit (JDK)=1.6.0-update_21

Java Development Kit (JDK)=1.6.0-update_22

Java Development Kit (JDK)=1.6.0-update_3

Java Development Kit (JDK)=1.6.0-update_4

Java Development Kit (JDK)=1.6.0-update_5

Java Development Kit (JDK)=1.6.0-update_6

Java Development Kit (JDK)=1.6.0-update_7

Java Development Kit (JDK)=1.6.0-update1

Java Development Kit (JDK)=1.6.0-update1_b06

Java Development Kit (JDK)=1.6.0-update2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html

Event History

Feb 17, 2011

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4451?

CVE-2010-4451 is considered a critical vulnerability that affects confidentiality, integrity, and availability.

How do I fix CVE-2010-4451?

To fix CVE-2010-4451, update to the latest version of Oracle Java SE or Java for Business.

What versions are affected by CVE-2010-4451?