| Revision Date: | 2015-03-23 | Version: | 10 | | Title: | Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy. | | Description: | Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy. | | Family: | windows | Class: | vulnerability | | Status: | ACCEPTED | Reference(s): | CVE-2010-3541
| | Platform(s): | Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Vista
Microsoft Windows XP
| Product(s): | Java Development Kit
Java Runtime Environment
| | Definition Synopsis | | Determine if the version of Java Runtime Environment is less than 1.6.0:update_22 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_22
AND Java SE Runtime Environment 6 is installed
OR Determine if the version of Java Development Kit is less than 1.6.0:update_22 and is greater than or equal to 1.6.0
Determine if the version of Java Development Kit is less than 1.6.0:update_22
AND Java SE Development Kit 6 is installed
OR Determine if the version of Java Runtime Environment is less than 1.5.0:update26 and is greater than or equal to 1.5.0
Determine if the version of Java Runtime Environment is less than 1.5.0:update26
AND Java SE Runtime Environment 5 is installed
OR Determine if the version of Java Development Kit is less than 1.5.0:update26 and is greater than or equal to 1.5.0
Determine if the version of Java Development Kit is less than 1.5.0:update26
AND Java SE Development Kit 5 is installed
|
|