Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2010-0088: Oracle Java SE can let remote attackers compromise data
CVE-2010-0088 · published 16 years ago
Summary
Versions of Oracle Java SE and Java for Business up to 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 contain an unspecified flaw that lets an attacker access, change, or disrupt your systems from afar. This can expose confidential information, corrupt files, or cause services to stop working. Apply the latest security updates from Oracle as soon as possible or upgrade to a supported Java version.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sun | jre |
<= 1.6.0 1.6.0 <= 1.5.0 1.5.0 <= 1.4.2_25 1.4.2 1.4.2_1 1.4.2_2 1.4.2_3 1.4.2_4 1.4.2_5 1.4.2_6 46 more version ranges
cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:* |
| sun | jdk |
<= 1.6.0 1.6.0 <= 1.5.0 1.5.0 <= 1.3.1_27 1.3.0 1.3.0_01 1.3.0_02 1.3.0_03 1.3.0_04 1.3.0_05 1.3.1 27 more version ranges
cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:* |
| sun | sdk |
<= 1.4.2_25 1.4.2 1.4.2_1 1.4.2_02 1.4.2_3 1.4.2_4 1.4.2_5 1.4.2_6 1.4.2_7 1.4.2_8 1.4.2_9 1.4.2_10 49 more version ranges
cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:* |
Original advisory text
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect conf...
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0085.
References
- http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
- http://lists.apple.com/archives/security-announce/2010//May/msg00001.html
- http://lists.apple.com/archives/security-announce/2010//May/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
- http://marc.info/?l=bugtraq&m=127557596201693&w=2
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://secunia.com/advisories/39292
- http://secunia.com/advisories/39317
- http://secunia.com/advisories/39659
- http://secunia.com/advisories/39819
- http://secunia.com/advisories/40545
- http://secunia.com/advisories/43308
- http://support.apple.com/kb/HT4170
- http://support.apple.com/kb/HT4171
- http://ubuntu.com/usn/usn-923-1
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:084
- http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
- http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html
- http://www.redhat.com/support/errata/RHSA-2010-0337.html
- http://www.redhat.com/support/errata/RHSA-2010-0338.html
- http://www.redhat.com/support/errata/RHSA-2010-0339.html
- http://www.redhat.com/support/errata/RHSA-2010-0383.html
- http://www.redhat.com/support/errata/RHSA-2010-0471.html
- http://www.securityfocus.com/archive/1/516397/100/0/threaded
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
- http://www.vupen.com/english/advisories/2010/1107
- http://www.vupen.com/english/advisories/2010/1191
- http://www.vupen.com/english/advisories/2010/1454
- http://www.vupen.com/english/advisories/2010/1793
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
6.8
Medium
Timeline
Published1 Apr 2010
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2010-0088 · NVD
Track software like this
Free during beta