CVE-2010-3559
Fixed in a distro release EPSS 10%
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this involves an incorrect sign extension in the HeadspaceSoundbank.nGetName function, which allows attackers to execute arbitrary code via a crafted BANK record that leads to a buffer overflow.
Products: sun jre, sun jdk, sun sdk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 4 | java-1.5.0-ibm | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-demo | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-devel | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-javacomm | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-jdbc | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-plugin | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-src | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-demo | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-devel | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-jdbc | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-plugin | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-src | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat rhel extras 5 | java-1.5.0-ibm | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-accessibility | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-demo | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-devel | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-javacomm | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-jdbc | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-plugin | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-src | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-demo | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-devel | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-jdbc | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-plugin | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-src | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat rhel extras 6 | java-1.5.0-ibm | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-demo | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-devel | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-javacomm | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-src | 1:1.5.0.12.2-1jpp.1.el6 |