Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-tez3-6kvc-3ugv
Summary
The Oracle JDK and JRE are vulnerable to multiple unspecified
    vulnerabilities.
Aliases
0
alias CVE-2010-0842
Fixed_packages
0
url pkg:ebuild/app-emulation/emul-linux-x86-java@1.6.0.20
purl pkg:ebuild/app-emulation/emul-linux-x86-java@1.6.0.20
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/emul-linux-x86-java@1.6.0.20
1
url pkg:ebuild/dev-java/sun-jdk@1.6.0.20
purl pkg:ebuild/dev-java/sun-jdk@1.6.0.20
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-java/sun-jdk@1.6.0.20
2
url pkg:ebuild/dev-java/sun-jre-bin@1.6.0.20
purl pkg:ebuild/dev-java/sun-jre-bin@1.6.0.20
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-java/sun-jre-bin@1.6.0.20
Affected_packages
0
url pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1?arch=el4
purl pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-6at4-zn4v-qbcj
3
vulnerability VCID-gcm9-p4c9-v3ed
4
vulnerability VCID-h1t3-5mnx-p7cc
5
vulnerability VCID-hfw9-yd8c-skff
6
vulnerability VCID-krqx-raqn-6fd9
7
vulnerability VCID-mjkc-m99w-t3bc
8
vulnerability VCID-n1an-y2zh-dyb8
9
vulnerability VCID-pyt6-km5c-ayff
10
vulnerability VCID-s5uh-nqh9-hbf5
11
vulnerability VCID-tez3-6kvc-3ugv
12
vulnerability VCID-tunw-gsap-43d8
13
vulnerability VCID-wrj7-8fdk-8yhc
14
vulnerability VCID-zafb-zsmd-5fdc
15
vulnerability VCID-zqzs-p41m-4kbr
16
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1%3Farch=el4
1
url pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1?arch=el5
purl pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-6at4-zn4v-qbcj
3
vulnerability VCID-gcm9-p4c9-v3ed
4
vulnerability VCID-h1t3-5mnx-p7cc
5
vulnerability VCID-hfw9-yd8c-skff
6
vulnerability VCID-krqx-raqn-6fd9
7
vulnerability VCID-mjkc-m99w-t3bc
8
vulnerability VCID-n1an-y2zh-dyb8
9
vulnerability VCID-pyt6-km5c-ayff
10
vulnerability VCID-s5uh-nqh9-hbf5
11
vulnerability VCID-tez3-6kvc-3ugv
12
vulnerability VCID-tunw-gsap-43d8
13
vulnerability VCID-wrj7-8fdk-8yhc
14
vulnerability VCID-zafb-zsmd-5fdc
15
vulnerability VCID-zqzs-p41m-4kbr
16
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1%3Farch=el5
2
url pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1?arch=el3
purl pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1?arch=el3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-6at4-zn4v-qbcj
3
vulnerability VCID-gcm9-p4c9-v3ed
4
vulnerability VCID-h1t3-5mnx-p7cc
5
vulnerability VCID-hfw9-yd8c-skff
6
vulnerability VCID-krqx-raqn-6fd9
7
vulnerability VCID-mjkc-m99w-t3bc
8
vulnerability VCID-n1an-y2zh-dyb8
9
vulnerability VCID-pyt6-km5c-ayff
10
vulnerability VCID-s5uh-nqh9-hbf5
11
vulnerability VCID-tez3-6kvc-3ugv
12
vulnerability VCID-tunw-gsap-43d8
13
vulnerability VCID-wrj7-8fdk-8yhc
14
vulnerability VCID-zafb-zsmd-5fdc
15
vulnerability VCID-zqzs-p41m-4kbr
16
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.5-1jpp.1%3Farch=el3
3
url pkg:rpm/redhat/java-1.4.2-ibm-sap@1.4.2.13.5.sap-1jpp.1?arch=el5
purl pkg:rpm/redhat/java-1.4.2-ibm-sap@1.4.2.13.5.sap-1jpp.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-6at4-zn4v-qbcj
3
vulnerability VCID-gcm9-p4c9-v3ed
4
vulnerability VCID-h1t3-5mnx-p7cc
5
vulnerability VCID-hfw9-yd8c-skff
6
vulnerability VCID-krqx-raqn-6fd9
7
vulnerability VCID-mjkc-m99w-t3bc
8
vulnerability VCID-n1an-y2zh-dyb8
9
vulnerability VCID-pyt6-km5c-ayff
10
vulnerability VCID-s5uh-nqh9-hbf5
11
vulnerability VCID-tez3-6kvc-3ugv
12
vulnerability VCID-tunw-gsap-43d8
13
vulnerability VCID-wrj7-8fdk-8yhc
14
vulnerability VCID-zafb-zsmd-5fdc
15
vulnerability VCID-zqzs-p41m-4kbr
16
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.4.2-ibm-sap@1.4.2.13.5.sap-1jpp.1%3Farch=el5
4
url pkg:rpm/redhat/java-1.4.2-ibm-sap@1.4.2.13.5.sap-1jpp.1?arch=el4_8
purl pkg:rpm/redhat/java-1.4.2-ibm-sap@1.4.2.13.5.sap-1jpp.1?arch=el4_8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-6at4-zn4v-qbcj
3
vulnerability VCID-gcm9-p4c9-v3ed
4
vulnerability VCID-h1t3-5mnx-p7cc
5
vulnerability VCID-hfw9-yd8c-skff
6
vulnerability VCID-krqx-raqn-6fd9
7
vulnerability VCID-mjkc-m99w-t3bc
8
vulnerability VCID-n1an-y2zh-dyb8
9
vulnerability VCID-pyt6-km5c-ayff
10
vulnerability VCID-s5uh-nqh9-hbf5
11
vulnerability VCID-tez3-6kvc-3ugv
12
vulnerability VCID-tunw-gsap-43d8
13
vulnerability VCID-wrj7-8fdk-8yhc
14
vulnerability VCID-zafb-zsmd-5fdc
15
vulnerability VCID-zqzs-p41m-4kbr
16
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.4.2-ibm-sap@1.4.2.13.5.sap-1jpp.1%3Farch=el4_8
5
url pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.11.2-1jpp.1?arch=el5
purl pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.11.2-1jpp.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-gcm9-p4c9-v3ed
3
vulnerability VCID-hfw9-yd8c-skff
4
vulnerability VCID-n1an-y2zh-dyb8
5
vulnerability VCID-pyt6-km5c-ayff
6
vulnerability VCID-s5uh-nqh9-hbf5
7
vulnerability VCID-tez3-6kvc-3ugv
8
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.11.2-1jpp.1%3Farch=el5
6
url pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.11.2-1jpp.1?arch=el4
purl pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.11.2-1jpp.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-gcm9-p4c9-v3ed
3
vulnerability VCID-hfw9-yd8c-skff
4
vulnerability VCID-n1an-y2zh-dyb8
5
vulnerability VCID-pyt6-km5c-ayff
6
vulnerability VCID-s5uh-nqh9-hbf5
7
vulnerability VCID-tez3-6kvc-3ugv
8
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.11.2-1jpp.1%3Farch=el4
7
url pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.3?arch=el4
purl pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.3?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-5ank-1yxa-zfdw
3
vulnerability VCID-5bmx-ugmn-bkf8
4
vulnerability VCID-5jg8-2nz6-hkbw
5
vulnerability VCID-6at4-zn4v-qbcj
6
vulnerability VCID-7yaz-ssq6-hkg2
7
vulnerability VCID-gcm9-p4c9-v3ed
8
vulnerability VCID-h1t3-5mnx-p7cc
9
vulnerability VCID-hfw9-yd8c-skff
10
vulnerability VCID-jau7-gfz8-dkfa
11
vulnerability VCID-kb93-t5uy-3qgh
12
vulnerability VCID-krqx-raqn-6fd9
13
vulnerability VCID-mjkc-m99w-t3bc
14
vulnerability VCID-n1an-y2zh-dyb8
15
vulnerability VCID-pyt6-km5c-ayff
16
vulnerability VCID-s5uh-nqh9-hbf5
17
vulnerability VCID-tez3-6kvc-3ugv
18
vulnerability VCID-tunw-gsap-43d8
19
vulnerability VCID-wrj7-8fdk-8yhc
20
vulnerability VCID-wzud-pdqf-3ubv
21
vulnerability VCID-xj3c-6jb6-9baq
22
vulnerability VCID-zafb-zsmd-5fdc
23
vulnerability VCID-zqzs-p41m-4kbr
24
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.3%3Farch=el4
8
url pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.3?arch=el5
purl pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.3?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-5ank-1yxa-zfdw
3
vulnerability VCID-5bmx-ugmn-bkf8
4
vulnerability VCID-5jg8-2nz6-hkbw
5
vulnerability VCID-6at4-zn4v-qbcj
6
vulnerability VCID-7yaz-ssq6-hkg2
7
vulnerability VCID-gcm9-p4c9-v3ed
8
vulnerability VCID-h1t3-5mnx-p7cc
9
vulnerability VCID-hfw9-yd8c-skff
10
vulnerability VCID-jau7-gfz8-dkfa
11
vulnerability VCID-kb93-t5uy-3qgh
12
vulnerability VCID-krqx-raqn-6fd9
13
vulnerability VCID-mjkc-m99w-t3bc
14
vulnerability VCID-n1an-y2zh-dyb8
15
vulnerability VCID-pyt6-km5c-ayff
16
vulnerability VCID-s5uh-nqh9-hbf5
17
vulnerability VCID-tez3-6kvc-3ugv
18
vulnerability VCID-tunw-gsap-43d8
19
vulnerability VCID-wrj7-8fdk-8yhc
20
vulnerability VCID-wzud-pdqf-3ubv
21
vulnerability VCID-xj3c-6jb6-9baq
22
vulnerability VCID-zafb-zsmd-5fdc
23
vulnerability VCID-zqzs-p41m-4kbr
24
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.3%3Farch=el5
9
url pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.8-1jpp.1?arch=el4
purl pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.8-1jpp.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-5bmx-ugmn-bkf8
3
vulnerability VCID-5jg8-2nz6-hkbw
4
vulnerability VCID-6at4-zn4v-qbcj
5
vulnerability VCID-7yaz-ssq6-hkg2
6
vulnerability VCID-gcm9-p4c9-v3ed
7
vulnerability VCID-h1t3-5mnx-p7cc
8
vulnerability VCID-hfw9-yd8c-skff
9
vulnerability VCID-kdb3-9kyt-rycg
10
vulnerability VCID-krqx-raqn-6fd9
11
vulnerability VCID-mjkc-m99w-t3bc
12
vulnerability VCID-n1an-y2zh-dyb8
13
vulnerability VCID-pyt6-km5c-ayff
14
vulnerability VCID-s5uh-nqh9-hbf5
15
vulnerability VCID-tez3-6kvc-3ugv
16
vulnerability VCID-tunw-gsap-43d8
17
vulnerability VCID-wrj7-8fdk-8yhc
18
vulnerability VCID-xj3c-6jb6-9baq
19
vulnerability VCID-zafb-zsmd-5fdc
20
vulnerability VCID-zqzs-p41m-4kbr
21
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.8-1jpp.1%3Farch=el4
10
url pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.8-1jpp.1?arch=el5
purl pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.8-1jpp.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-5bmx-ugmn-bkf8
3
vulnerability VCID-5jg8-2nz6-hkbw
4
vulnerability VCID-6at4-zn4v-qbcj
5
vulnerability VCID-7yaz-ssq6-hkg2
6
vulnerability VCID-gcm9-p4c9-v3ed
7
vulnerability VCID-h1t3-5mnx-p7cc
8
vulnerability VCID-hfw9-yd8c-skff
9
vulnerability VCID-kdb3-9kyt-rycg
10
vulnerability VCID-krqx-raqn-6fd9
11
vulnerability VCID-mjkc-m99w-t3bc
12
vulnerability VCID-n1an-y2zh-dyb8
13
vulnerability VCID-pyt6-km5c-ayff
14
vulnerability VCID-s5uh-nqh9-hbf5
15
vulnerability VCID-tez3-6kvc-3ugv
16
vulnerability VCID-tunw-gsap-43d8
17
vulnerability VCID-wrj7-8fdk-8yhc
18
vulnerability VCID-xj3c-6jb6-9baq
19
vulnerability VCID-zafb-zsmd-5fdc
20
vulnerability VCID-zqzs-p41m-4kbr
21
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.8-1jpp.1%3Farch=el5
11
url pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.19-1jpp.1?arch=el5
purl pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.19-1jpp.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-5ank-1yxa-zfdw
3
vulnerability VCID-5bmx-ugmn-bkf8
4
vulnerability VCID-5jg8-2nz6-hkbw
5
vulnerability VCID-6at4-zn4v-qbcj
6
vulnerability VCID-7yaz-ssq6-hkg2
7
vulnerability VCID-gcm9-p4c9-v3ed
8
vulnerability VCID-h1t3-5mnx-p7cc
9
vulnerability VCID-hfw9-yd8c-skff
10
vulnerability VCID-jau7-gfz8-dkfa
11
vulnerability VCID-kb93-t5uy-3qgh
12
vulnerability VCID-kdb3-9kyt-rycg
13
vulnerability VCID-krqx-raqn-6fd9
14
vulnerability VCID-mjkc-m99w-t3bc
15
vulnerability VCID-n1an-y2zh-dyb8
16
vulnerability VCID-pyt6-km5c-ayff
17
vulnerability VCID-s5uh-nqh9-hbf5
18
vulnerability VCID-tez3-6kvc-3ugv
19
vulnerability VCID-tunw-gsap-43d8
20
vulnerability VCID-wrj7-8fdk-8yhc
21
vulnerability VCID-wzud-pdqf-3ubv
22
vulnerability VCID-xj3c-6jb6-9baq
23
vulnerability VCID-zafb-zsmd-5fdc
24
vulnerability VCID-zqzs-p41m-4kbr
25
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.19-1jpp.1%3Farch=el5
12
url pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.19-1jpp.1?arch=el4
purl pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.19-1jpp.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47zv-w3cw-gqdu
1
vulnerability VCID-4af6-jbwu-vqa5
2
vulnerability VCID-5ank-1yxa-zfdw
3
vulnerability VCID-5bmx-ugmn-bkf8
4
vulnerability VCID-5jg8-2nz6-hkbw
5
vulnerability VCID-6at4-zn4v-qbcj
6
vulnerability VCID-7yaz-ssq6-hkg2
7
vulnerability VCID-gcm9-p4c9-v3ed
8
vulnerability VCID-h1t3-5mnx-p7cc
9
vulnerability VCID-hfw9-yd8c-skff
10
vulnerability VCID-jau7-gfz8-dkfa
11
vulnerability VCID-kb93-t5uy-3qgh
12
vulnerability VCID-kdb3-9kyt-rycg
13
vulnerability VCID-krqx-raqn-6fd9
14
vulnerability VCID-mjkc-m99w-t3bc
15
vulnerability VCID-n1an-y2zh-dyb8
16
vulnerability VCID-pyt6-km5c-ayff
17
vulnerability VCID-s5uh-nqh9-hbf5
18
vulnerability VCID-tez3-6kvc-3ugv
19
vulnerability VCID-tunw-gsap-43d8
20
vulnerability VCID-wrj7-8fdk-8yhc
21
vulnerability VCID-wzud-pdqf-3ubv
22
vulnerability VCID-xj3c-6jb6-9baq
23
vulnerability VCID-zafb-zsmd-5fdc
24
vulnerability VCID-zqzs-p41m-4kbr
25
vulnerability VCID-zxye-ucrs-uuec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.19-1jpp.1%3Farch=el4
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0842.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0842.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-0842
reference_id
reference_type
scores
0
value 0.84326
scoring_system epss
scoring_elements 0.99314
published_at 2026-04-02T12:55:00Z
1
value 0.84326
scoring_system epss
scoring_elements 0.99316
published_at 2026-04-04T12:55:00Z
2
value 0.84326
scoring_system epss
scoring_elements 0.99318
published_at 2026-04-07T12:55:00Z
3
value 0.84326
scoring_system epss
scoring_elements 0.99319
published_at 2026-04-08T12:55:00Z
4
value 0.84326
scoring_system epss
scoring_elements 0.9932
published_at 2026-04-09T12:55:00Z
5
value 0.84326
scoring_system epss
scoring_elements 0.99321
published_at 2026-04-13T12:55:00Z
6
value 0.84326
scoring_system epss
scoring_elements 0.99322
published_at 2026-04-12T12:55:00Z
7
value 0.84326
scoring_system epss
scoring_elements 0.99323
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-0842
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=578436
reference_id 578436
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=578436
3
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/18485.rb
reference_id CVE-2010-0842;OSVDB-63493
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/18485.rb
4
reference_url http://www.zerodayinitiative.com/advisories/ZDI-10-060/
reference_id CVE-2010-0842;OSVDB-63493
reference_type exploit
scores
url http://www.zerodayinitiative.com/advisories/ZDI-10-060/
5
reference_url https://security.gentoo.org/glsa/201006-18
reference_id GLSA-201006-18
reference_type
scores
url https://security.gentoo.org/glsa/201006-18
6
reference_url https://access.redhat.com/errata/RHSA-2010:0383
reference_id RHSA-2010:0383
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0383
7
reference_url https://access.redhat.com/errata/RHSA-2010:0471
reference_id RHSA-2010:0471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0471
8
reference_url https://access.redhat.com/errata/RHSA-2010:0489
reference_id RHSA-2010:0489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0489
9
reference_url https://access.redhat.com/errata/RHSA-2010:0574
reference_id RHSA-2010:0574
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0574
10
reference_url https://access.redhat.com/errata/RHSA-2010:0586
reference_id RHSA-2010:0586
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0586
Weaknesses
Exploits
0
date_added 2012-02-16
description Java MixerSequencer Object - GM_Song Structure Handling (Metasploit)
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2012-02-16
exploit_type remote
platform windows
source_date_updated 2012-02-16
data_source Exploit-DB
source_url http://www.zerodayinitiative.com/advisories/ZDI-10-060/
1
date_added null
description 
This module exploits a flaw within the handling of MixerSequencer objects
          in Java 6u18 and before.

          Exploitation id done by supplying a specially crafted MIDI file within an RMF
          File. When the MixerSequencer objects is used to play the file, the GM_Song
          structure is populated with a function pointer provided by a SONG block in the
          RMF. A Midi block that contains a MIDI with a specially crafted controller event
          is used to trigger the vulnerability.

          When triggering the vulnerability "ebx" points to a fake event in the MIDI file
          which stores the shellcode. A "jmp ebx" from msvcr71.dll is used to make the
          exploit reliable over java updates.
required_action null
due_date null
notes 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
known_ransomware_campaign_use false
source_date_published 2010-03-30
exploit_type null
platform Windows
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/browser/java_mixer_sequencer.rb
Severity_range_scorenull
Exploitability2.0
Weighted_severity0.8
Risk_score1.6
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-tez3-6kvc-3ugv