CVE-2010-0840 kev in the critical feed json
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and…
published 16y ago modified 4mo ago also EUVD-2010-0865
- cvss
- 9.8
- version 3.1, CNA
- cisa kev
- Exploited
- added 2022-05-25
- epss
- 96.3%
- EPSS 96.3% chance of exploitation in 30 days, percentile 99.8%
- public exploits
- 2
- Metasploit and Exploit-DB
Summary
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Patch / fix
cisa required action Apply updates per vendor instructions.
- java-1.4.2-ibm RHEL 3 EXTRAS 1.4.2.13.5-1jpp.1.el3
- java-1.4.2-ibm RHEL 4 EXTRAS 1.4.2.13.5-1jpp.1.el4
- java-1.4.2-ibm RHEL 5 EXTRAS 1.4.2.13.5-1jpp.1.el5
- java-1.4.2-ibm-src RHEL 3 EXTRAS 1.4.2.13.5-1jpp.1.el3
- java-1.4.2-ibm-src RHEL 4 EXTRAS 1.4.2.13.5-1jpp.1.el4
- java-1.4.2-ibm-src RHEL 5 EXTRAS 1.4.2.13.5-1jpp.1.el5
- java-1.4.2-ibm-demo RHEL 3 EXTRAS 1.4.2.13.5-1jpp.1.el3
- java-1.4.2-ibm-demo RHEL 4 EXTRAS 1.4.2.13.5-1jpp.1.el4
red hat advisories RHSA-2010:0574RHSA-2010:0489RHSA-2010:0383RHSA-2010:0471RHSA-2010:0586RHSA-2010:0339
Is CVE-2010-0840 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2010-0840 updated cvss 7.5
OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)
-
Red Hat Desktop version 3 Extras java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-plugin 1.4.2.13.5-1jpp.1.el3 Red Hat Desktop version 4 Extras java-1.6.0-ibm 1.6.0.8-1jpp.1.el4, java-1.6.0-sun 1.6.0.19-1jpp.1.el4, java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el4, java-1.5.0-ibm 1.5.0.11.2-1jpp.1.el4, java-1.6.0-ibm-src 1.6.0.8-1jpp.1.el4, java-1.6.0-ibm-demo 1.6.0.8-1jpp.1.el4, +18 morefixed: vendor fix RHSA-2010:0574
-
Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk 1.6.0.0-1.11.b16.el5, java-1.6.0-openjdk-src 1.6.0.0-1.11.b16.el5, java-1.6.0-openjdk-demo 1.6.0.0-1.11.b16.el5, java-1.6.0-openjdk-javadoc 1.6.0.0-1.11.b16.el5fixed: vendor fix RHSA-2010:0339
-
Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-plugin 1.4.2.13.5-1jpp.1.el3 Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-ibm 1.6.0.8-1jpp.1.el4, java-1.6.0-sun 1.6.0.19-1jpp.1.el4, java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el4, java-1.5.0-ibm 1.5.0.11.2-1jpp.1.el4, java-1.6.0-ibm-src 1.6.0.8-1jpp.1.el4, java-1.6.0-ibm-demo 1.6.0.8-1jpp.1.el4, +18 morefixed: vendor fix RHSA-2010:0574
-
Red Hat Enterprise Linux AS version 4.7.z Extras java-1.5.0-sun-uninstall 1.5.0.22-1jpp.3.el4fixed: vendor fix RHSA-2010:0338
-
Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk 1.6.0.0-1.11.b16.el5, java-1.6.0-openjdk-src 1.6.0.0-1.11.b16.el5, java-1.6.0-openjdk-demo 1.6.0.0-1.11.b16.el5, java-1.6.0-openjdk-javadoc 1.6.0.0-1.11.b16.el5fixed: vendor fix RHSA-2010:0339
-
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm 1.6.0.8-1jpp.1.el5, java-1.6.0-sun 1.6.0.19-1jpp.1.el5, java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el5, java-1.5.0-ibm 1.5.0.11.2-1jpp.1.el5, java-1.6.0-ibm-src 1.6.0.8-1jpp.1.el5, java-1.6.0-ibm-demo 1.6.0.8-1jpp.1.el5, +20 more Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-plugin 1.4.2.13.5-1jpp.1.el3 Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-ibm 1.6.0.8-1jpp.1.el4, java-1.6.0-sun 1.6.0.19-1jpp.1.el4, java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el4, java-1.5.0-ibm 1.5.0.11.2-1jpp.1.el4, java-1.6.0-ibm-src 1.6.0.8-1jpp.1.el4, java-1.6.0-ibm-demo 1.6.0.8-1jpp.1.el4, +18 morefixed: vendor fix RHSA-2010:0574
-
Red Hat Enterprise Linux ES version 4.7.z Extras java-1.5.0-sun-uninstall 1.5.0.22-1jpp.3.el4fixed: vendor fix RHSA-2010:0338
-
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm 1.6.0.8-1jpp.1.el5, java-1.6.0-sun 1.6.0.19-1jpp.1.el5, java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el5, java-1.5.0-ibm 1.5.0.11.2-1jpp.1.el5, java-1.6.0-ibm-src 1.6.0.8-1jpp.1.el5, java-1.6.0-ibm-demo 1.6.0.8-1jpp.1.el5, +20 more Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-plugin 1.4.2.13.5-1jpp.1.el3 Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-ibm 1.6.0.8-1jpp.1.el4, java-1.6.0-sun 1.6.0.19-1jpp.1.el4, java-1.4.2-ibm 1.4.2.13.5-1jpp.1.el4, java-1.5.0-ibm 1.5.0.11.2-1jpp.1.el4, java-1.6.0-ibm-src 1.6.0.8-1jpp.1.el4, java-1.6.0-ibm-demo 1.6.0.8-1jpp.1.el4, +18 morefixed: vendor fix RHSA-2010:0574
show 3 moreshow fewer
-
Red Hat Satellite 5.3 (RHEL v.4) java-1.6.0-ibm 1.6.0.8-1jpp.1.el4 Red Hat Satellite 5.3 (RHEL v.5) java-1.6.0-ibm 1.6.0.8-1jpp.1.el5fixed: vendor fix RHSA-2010:0471
-
Red Hat RHEL 4 AS for SAP java-1.4.2-ibm-sap 1.4.2.13.5.sap-1jpp.1.el4_8, java-1.4.2-ibm-sap-src 1.4.2.13.5.sap-1jpp.1.el4_8, java-1.4.2-ibm-sap-demo 1.4.2.13.5.sap-1jpp.1.el4_8, java-1.4.2-ibm-sap-javacomm 1.4.2.13.5.sap-1jpp.1.el4_8 Red Hat RHEL 5 Server for SAP java-1.4.2-ibm-sap 1.4.2.13.5.sap-1jpp.1.el5, java-1.4.2-ibm-sap-src 1.4.2.13.5.sap-1jpp.1.el5, java-1.4.2-ibm-sap-demo 1.4.2.13.5.sap-1jpp.1.el5, java-1.4.2-ibm-sap-javacomm 1.4.2.13.5.sap-1jpp.1.el5fixed: vendor fix RHSA-2010:0586
-
Red Hat RHEL Supplementary (v. 5.2.Z server) java-1.5.0-sun-uninstall 1.5.0.22-1jpp.3.el5 Red Hat RHEL Supplementary (v. 5.3.Z server) java-1.5.0-sun-uninstall 1.5.0.22-1jpp.3.el5fixed: vendor fix RHSA-2010:0338
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- First public exploit (Metasploit exploit/multi/browser/java_trusted_chain)
- Published
- Added to CISA KEV
- CISA patch deadline
- CISA SSVC: exploitation active
Known exploited
- Added
- 4y ago
- Patch by
- 2022-06-15 (4y ago)
- Ransomware
- Not known
- Required action
- Apply updates per vendor instructions.
- Vendor, product
- Oracle, Java Runtime Environment (JRE)
- CISA name
- Oracle JRE Unspecified Vulnerability
CISA SSVC
- Exploitation
- Active, exploited in the wild
- Automatable
- yes
- Technical impact
- total
- Assessed
- last yr.
Exploit prediction
96.32% chance of exploitation in the next 30 days, higher than 99.8% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/multi/browser/java_trusted_chain Java Statement.invoke() Trusted Method Chain Privilege Escalation metasploit exploit, excellent rank, 2010-03-31
- EDB-16297 Java - 'Statement.invoke()' Trusted Method Chain (Metasploit) remote, 2010-12-15
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
oracle.com
/technetwork/topics/security/cpuoct2010-175626.html
patch, third-party-advisory
-
oracle.com
/technetwork/topics/security/javacpumar2010-083341.html
patch, third-party-advisory
-
lists.apple.com
/archives/security-announce/2010//May/msg00001.html
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=134254866602253&w=2
vendor-advisory, mailing-list
-
redhat.com
/support/errata/RHSA-2010-0383.html
vendor-advisory, broken-link
-
redhat.com
/support/errata/RHSA-2010-0338.html
vendor-advisory, broken-link
-
lists.apple.com
/archives/security-announce/2010//May/msg00002.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2010-05/msg00001.html
vendor-advisory, mailing-list, third-party-advisory
-
itrc.hp.com
/service/cki/docDisplay.do?docId=emr_na-c02273751
vendor-advisory, broken-link
-
marc.info
/?l=bugtraq&m=127557596201693&w=2
vendor-advisory, mailing-list
-
redhat.com
/support/errata/RHSA-2010-0339.html
vendor-advisory, broken-link
-
lists.opensuse.org
/opensuse-security-announce/2010-04/msg00001.html
vendor-advisory, mailing-list, third-party-advisory
-
redhat.com
/support/errata/RHSA-2010-0471.html
vendor-advisory, broken-link
-
lists.opensuse.org
/opensuse-security-announce/2010-09/msg00006.html
vendor-advisory, mailing-list, third-party-advisory
-
ubuntu.com
/usn/usn-923-1
vendor-advisory, third-party-advisory
-
redhat.com
/support/errata/RHSA-2010-0337.html
vendor-advisory, broken-link
-
redhat.com
/support/errata/RHSA-2010-0489.html
vendor-advisory, broken-link
-
mandriva.com
/security/advisories?name=MDVSA-2010:084
vendor-advisory, broken-link
-
secunia.com
/advisories/39317
third-party-advisory, broken-link, vendor-advisory
-
secunia.com
/advisories/40545
third-party-advisory, broken-link, vendor-advisory
-
vupen.com
/english/advisories/2010/1454
vdb-entry, broken-link, vendor-advisory
-
secunia.com
/advisories/39819
third-party-advisory, broken-link, vendor-advisory
-
vupen.com
/english/advisories/2010/1793
vdb-entry, broken-link, vendor-advisory
-
secunia.com
/advisories/43308
third-party-advisory, broken-link, vendor-advisory
-
secunia.com
/advisories/39292
third-party-advisory, broken-link, vendor-advisory
-
vupen.com
/english/advisories/2010/1523
vdb-entry, broken-link, vendor-advisory
-
secunia.com
/advisories/39659
third-party-advisory, broken-link, vendor-advisory
-
secunia.com
/advisories/40211
third-party-advisory, broken-link, vendor-advisory
-
vupen.com
/english/advisories/2010/1191
vdb-entry, broken-link, vendor-advisory
-
securityfocus.com
/archive/1/510528/100/0/threaded
mailing-list, broken-link, third-party-advisory, vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13971
vdb-entry, signature, broken-link
-
vupen.com
/english/advisories/2010/1107
vdb-entry, broken-link
-
support.apple.com
/kb/HT4170
release-notes, third-party-advisory
-
vmware.com
/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
release-notes
-
securityfocus.com
/bid/39065
vdb-entry, broken-link, third-party-advisory
-
vmware.com
/security/advisories/VMSA-2011-0003.html
third-party-advisory
-
zerodayinitiative.com
/advisories/ZDI-10-056
third-party-advisory, vdb-entry
-
support.apple.com
/kb/HT4171
release-notes, third-party-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9974
vdb-entry, signature, broken-link
-
securityfocus.com
/archive/1/516397/100/0/threaded
mailing-list, broken-link, third-party-advisory, vdb-entry
Sources
- CVE List CVE-2010-0840
- NVD CVE-2010-0840
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.