Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-tez3-6kvc-3ugv
Vulnerability ID VCID-tez3-6kvc-3ugv
Aliases CVE-2010-0842
Summary The Oracle JDK and JRE are vulnerable to multiple unspecified vulnerabilities.
Status Published
Exploitability 2.0
Weighted Severity 0.8
Risk 1.6
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
epss 0.84326 https://api.first.org/data/v1/epss?cve=CVE-2010-0842
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0842.json
https://api.first.org/data/v1/epss?cve=CVE-2010-0842
578436 https://bugzilla.redhat.com/show_bug.cgi?id=578436
CVE-2010-0842;OSVDB-63493 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/18485.rb
CVE-2010-0842;OSVDB-63493 Exploit http://www.zerodayinitiative.com/advisories/ZDI-10-060/
GLSA-201006-18 https://security.gentoo.org/glsa/201006-18
RHSA-2010:0383 https://access.redhat.com/errata/RHSA-2010:0383
RHSA-2010:0471 https://access.redhat.com/errata/RHSA-2010:0471
RHSA-2010:0489 https://access.redhat.com/errata/RHSA-2010:0489
RHSA-2010:0574 https://access.redhat.com/errata/RHSA-2010:0574
RHSA-2010:0586 https://access.redhat.com/errata/RHSA-2010:0586
Data source Metasploit
Description This module exploits a flaw within the handling of MixerSequencer objects in Java 6u18 and before. Exploitation id done by supplying a specially crafted MIDI file within an RMF File. When the MixerSequencer objects is used to play the file, the GM_Song structure is populated with a function pointer provided by a SONG block in the RMF. A Midi block that contains a MIDI with a specially crafted controller event is used to trigger the vulnerability. When triggering the vulnerability "ebx" points to a fake event in the MIDI file which stores the shellcode. A "jmp ebx" from msvcr71.dll is used to make the exploit reliable over java updates.
Note 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
Ransomware campaign use Unknown
Source publication date March 30, 2010
Platform Windows
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/browser/java_mixer_sequencer.rb
Data source Exploit-DB
Date added Feb. 16, 2012
Description Java MixerSequencer Object - GM_Song Structure Handling (Metasploit)
Ransomware campaign use Known
Source publication date Feb. 16, 2012
Exploit type remote
Platform windows
Source update date Feb. 16, 2012
Source URL http://www.zerodayinitiative.com/advisories/ZDI-10-060/
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.99314
EPSS Score 0.84326
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:13.831677+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201006-18 38.0.0