CVE-2010-4472: Low severity sun java runtime environment (jre) vulnerability

Q: What is the severity of CVE-2010-4472?

CVE-2010-4472 has a critical severity level as it allows remote attackers to affect the availability of the system.

Q: How do I fix CVE-2010-4472?

To fix CVE-2010-4472, update your Java Runtime Environment to the latest version available from Oracle.

Q: Which versions of Java are affected by CVE-2010-4472?

CVE-2010-4472 affects Java SE and Java for Business 6 Update 23 and earlier, including various specific updates of 1.6.0.

Q: What type of vulnerability is CVE-2010-4472?

CVE-2010-4472 is an unspecified vulnerability related to XML Digital Signature and certain APIs.

Q: Can CVE-2010-4472 be exploited remotely?

Yes, CVE-2010-4472 can be exploited remotely, which poses significant risks to system availability.

Published Feb 17, 2011

Updated

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue involves the replacement of the "XML DSig Transform or C14N algorithm implementations."

Affected Software

45 affected components

Sun Java Runtime Environment (JRE)<=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0-update_1

Sun Java Runtime Environment (JRE)=1.6.0-update_10

Sun Java Runtime Environment (JRE)=1.6.0-update_11

Sun Java Runtime Environment (JRE)=1.6.0-update_12

Sun Java Runtime Environment (JRE)=1.6.0-update_13

Sun Java Runtime Environment (JRE)=1.6.0-update_14

Sun Java Runtime Environment (JRE)=1.6.0-update_15

Sun Java Runtime Environment (JRE)=1.6.0-update_16

Sun Java Runtime Environment (JRE)=1.6.0-update_17

Sun Java Runtime Environment (JRE)=1.6.0-update_18

Sun Java Runtime Environment (JRE)=1.6.0-update_19

Sun Java Runtime Environment (JRE)=1.6.0-update_2

Sun Java Runtime Environment (JRE)=1.6.0-update_20

Sun Java Runtime Environment (JRE)=1.6.0-update_21

Sun Java Runtime Environment (JRE)=1.6.0-update_22

Sun Java Runtime Environment (JRE)=1.6.0-update_3

Sun Java Runtime Environment (JRE)=1.6.0-update_4

Sun Java Runtime Environment (JRE)=1.6.0-update_5

Sun Java Runtime Environment (JRE)=1.6.0-update_6

Sun Java Runtime Environment (JRE)=1.6.0-update_7

Java Development Kit (JDK)<=1.6.0

Java Development Kit (JDK)=1.6.0

Java Development Kit (JDK)=1.6.0-update_10

Java Development Kit (JDK)=1.6.0-update_11

Java Development Kit (JDK)=1.6.0-update_12

Java Development Kit (JDK)=1.6.0-update_13

Java Development Kit (JDK)=1.6.0-update_14

Java Development Kit (JDK)=1.6.0-update_15

Java Development Kit (JDK)=1.6.0-update_16

Java Development Kit (JDK)=1.6.0-update_17

Java Development Kit (JDK)=1.6.0-update_18

Java Development Kit (JDK)=1.6.0-update_19

Java Development Kit (JDK)=1.6.0-update_20

Java Development Kit (JDK)=1.6.0-update_21

Java Development Kit (JDK)=1.6.0-update_22

Java Development Kit (JDK)=1.6.0-update_3

Java Development Kit (JDK)=1.6.0-update_4

Java Development Kit (JDK)=1.6.0-update_5

Java Development Kit (JDK)=1.6.0-update_6

Java Development Kit (JDK)=1.6.0-update_7

Java Development Kit (JDK)=1.6.0-update1

Java Development Kit (JDK)=1.6.0-update1_b06

Java Development Kit (JDK)=1.6.0-update2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html

Event History

Feb 17, 2011

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4472?

CVE-2010-4472 has a critical severity level as it allows remote attackers to affect the availability of the system.

How do I fix CVE-2010-4472?

To fix CVE-2010-4472, update your Java Runtime Environment to the latest version available from Oracle.

Which versions of Java are affected by CVE-2010-4472?