Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*

part: a version: 1.3.0 update: update2

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3574 vulnerable 2026-06-08 04:55:15.224817 Details available
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3572 vulnerable 2026-06-08 04:55:15.213074 Details available
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3571 vulnerable 2026-06-08 04:55:15.205193 Details available
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the color profile parser that allows remote attackers to execute arbitrary code via a crafted Tag structure in a color profile.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3562 vulnerable 2026-06-08 04:55:15.167382 Details available
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3559 vulnerable 2026-06-08 04:55:15.155864 Details available
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this involves an incorrect sign extension in the HeadspaceSoundbank.nGetName function, which allows attackers to execute arbitrary code via a crafted BANK record that leads to a buffer overflow.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3557 vulnerable 2026-06-08 04:55:15.148491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3556 vulnerable 2026-06-08 04:55:15.142068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3554 vulnerable 2026-06-08 04:55:15.132774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3553 vulnerable 2026-06-08 04:55:15.126385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3549 vulnerable 2026-06-08 04:55:15.111375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3541 vulnerable 2026-06-08 04:55:15.047276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0850 vulnerable 2026-06-08 04:54:03.721283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0849 vulnerable 2026-06-08 04:54:03.713335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0848 vulnerable 2026-06-08 04:54:03.706880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0847 vulnerable 2026-06-08 04:54:03.699596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0846 vulnerable 2026-06-08 04:54:03.451999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0844 vulnerable 2026-06-08 04:54:03.432646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0842 vulnerable 2026-06-08 04:52:04.824767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0839 vulnerable 2026-06-08 04:52:04.779136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0088 vulnerable 2026-06-08 04:51:52.598294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0087 vulnerable 2026-06-08 04:51:52.590827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0085 vulnerable 2026-06-08 04:51:52.582516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0082 vulnerable 2026-06-08 04:51:52.556468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3907 vulnerable 2026-06-08 04:48:42.494894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3906 vulnerable 2026-06-08 04:48:42.493874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3905 vulnerable 2026-06-08 04:48:42.490785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3904 vulnerable 2026-06-08 04:48:42.412650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0058 vulnerable 2026-06-08 04:46:20.527343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.