Vulnerability Description
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to the exposure of system properties via vectors related to Font.createFont and exception text.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sun | Jre | <= 1.6.0 |
| Sun | Jdk | <= 1.6.0 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.h
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.h
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- http://secunia.com/advisories/43350Vendor Advisory
- http://secunia.com/advisories/44954Vendor Advisory
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://www.debian.org/security/2011/dsa-2224
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/inde
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:054
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.htmlPatchVendor Advisory
- http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.htmlPatchVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0282.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0880.htmlVendor Advisory
- http://www.securityfocus.com/bid/46399
FAQ
What is CVE-2010-4471?
CVE-2010-4471 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start ap...
How severe is CVE-2010-4471?
CVE-2010-4471 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-4471?
Check the references section above for vendor advisories and patch information. Affected products include: Sun Jre, Sun Jdk.