CISA-2010-0840
Reported by oracle · Published April 1, 2010
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a |
Timeline
- Apr 1, 2010 CVE Published
- Oct 22, 2025 CVE Updated
- Mar 17, 2026 Distribution Patch
- Mar 17, 2026 Security Advisory
- Mar 17, 2026 Security Advisory
- Mar 17, 2026 Security Advisory
References
- APPLE-SA-2010-05-18-1 vendor-advisoryx_refsource_APPLE
- HPSBMU02799 vendor-advisoryx_refsource_HP
- 20100405 ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability mailing-listx_refsource_BUGTRAQ
- 39317 third-party-advisoryx_refsource_SECUNIA
- RHSA-2010:0383 vendor-advisoryx_refsource_REDHAT
- 40545 third-party-advisoryx_refsource_SECUNIA
- ADV-2010-1454 vdb-entryx_refsource_VUPEN
- oval:org.mitre.oval:def:13971 vdb-entrysignaturex_refsource_OVAL
- 39819 third-party-advisoryx_refsource_SECUNIA
- ADV-2010-1107 vdb-entryx_refsource_VUPEN
- RHSA-2010:0338 vendor-advisoryx_refsource_REDHAT
- ADV-2010-1793 vdb-entryx_refsource_VUPEN
- APPLE-SA-2010-05-18-2 vendor-advisoryx_refsource_APPLE
- SUSE-SR:2010:011 vendor-advisoryx_refsource_SUSE
- 43308 third-party-advisoryx_refsource_SECUNIA
- x_refsource_CONFIRM
- SSRT100179 vendor-advisoryx_refsource_HP
- SSRT100089 vendor-advisoryx_refsource_HP
- x_refsource_CONFIRM
- RHSA-2010:0339 vendor-advisoryx_refsource_REDHAT
…and 21 more