CVE-2010-4474: Low severity sun java runtime environment (jre) vulnerability

Q: What is the severity of CVE-2010-4474?

The severity of CVE-2010-4474 is classified as moderate due to its potential impact on confidentiality.

Q: How do I fix CVE-2010-4474?

To fix CVE-2010-4474, update your Oracle Java SE or Java for Business to a version later than 1.6.0-update_23.

Q: Which versions of Java are affected by CVE-2010-4474?

CVE-2010-4474 affects Java DB component in Oracle Java SE and Java for Business 6 Update 23 and earlier versions.

Q: What type of vulnerability is CVE-2010-4474?

CVE-2010-4474 is an unspecified security vulnerability related to the Java DB component.

Q: Who is impacted by CVE-2010-4474?

Local users who have access to systems running the affected versions of Java are potentially impacted by CVE-2010-4474.

Published Feb 17, 2011

Updated

Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269.

Affected Software

45 affected components

Sun Java Runtime Environment (JRE)<=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0

Sun Java Runtime Environment (JRE)=1.6.0-update_1

Sun Java Runtime Environment (JRE)=1.6.0-update_10

Sun Java Runtime Environment (JRE)=1.6.0-update_11

Sun Java Runtime Environment (JRE)=1.6.0-update_12

Sun Java Runtime Environment (JRE)=1.6.0-update_13

Sun Java Runtime Environment (JRE)=1.6.0-update_14

Sun Java Runtime Environment (JRE)=1.6.0-update_15

Sun Java Runtime Environment (JRE)=1.6.0-update_16

Sun Java Runtime Environment (JRE)=1.6.0-update_17

Sun Java Runtime Environment (JRE)=1.6.0-update_18

Sun Java Runtime Environment (JRE)=1.6.0-update_19

Sun Java Runtime Environment (JRE)=1.6.0-update_2

Sun Java Runtime Environment (JRE)=1.6.0-update_20

Sun Java Runtime Environment (JRE)=1.6.0-update_21

Sun Java Runtime Environment (JRE)=1.6.0-update_22

Sun Java Runtime Environment (JRE)=1.6.0-update_3

Sun Java Runtime Environment (JRE)=1.6.0-update_4

Sun Java Runtime Environment (JRE)=1.6.0-update_5

Sun Java Runtime Environment (JRE)=1.6.0-update_6

Sun Java Runtime Environment (JRE)=1.6.0-update_7

Java Development Kit (JDK)<=1.6.0

Java Development Kit (JDK)=1.6.0

Java Development Kit (JDK)=1.6.0-update_10

Java Development Kit (JDK)=1.6.0-update_11

Java Development Kit (JDK)=1.6.0-update_12

Java Development Kit (JDK)=1.6.0-update_13

Java Development Kit (JDK)=1.6.0-update_14

Java Development Kit (JDK)=1.6.0-update_15

Java Development Kit (JDK)=1.6.0-update_16

Java Development Kit (JDK)=1.6.0-update_17

Java Development Kit (JDK)=1.6.0-update_18

Java Development Kit (JDK)=1.6.0-update_19

Java Development Kit (JDK)=1.6.0-update_20

Java Development Kit (JDK)=1.6.0-update_21

Java Development Kit (JDK)=1.6.0-update_22

Java Development Kit (JDK)=1.6.0-update_3

Java Development Kit (JDK)=1.6.0-update_4

Java Development Kit (JDK)=1.6.0-update_5

Java Development Kit (JDK)=1.6.0-update_6

Java Development Kit (JDK)=1.6.0-update_7

Java Development Kit (JDK)=1.6.0-update1

Java Development Kit (JDK)=1.6.0-update1_b06

Java Development Kit (JDK)=1.6.0-update2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html

Event History

Feb 17, 2011

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4474?

The severity of CVE-2010-4474 is classified as moderate due to its potential impact on confidentiality.

How do I fix CVE-2010-4474?

To fix CVE-2010-4474, update your Oracle Java SE or Java for Business to a version later than 1.6.0-update_23.

Which versions of Java are affected by CVE-2010-4474?