Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*

part: a version: * update: update23

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0849 vulnerable 2026-06-08 04:54:03.711836 Details available
Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Published: 2010-04-01T16:00:00.000Z
Updated: 2024-08-07T00:59:39.424Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0848 vulnerable 2026-06-08 04:54:03.705295 Details available
Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-04-01T16:00:00.000Z
Updated: 2024-08-07T00:59:39.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0847 vulnerable 2026-06-08 04:54:03.688804 Details available
Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Published: 2010-04-01T16:00:00.000Z
Updated: 2024-08-07T00:59:39.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0846 vulnerable 2026-06-08 04:54:03.450365 Details available
Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image encoder (JPEGImageEncoderImpl).
Published: 2010-04-01T16:00:00.000Z
Updated: 2024-08-07T00:59:39.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0845 vulnerable 2026-06-08 04:54:03.442207 Details available
Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-04-01T16:00:00.000Z
Updated: 2024-08-07T00:59:39.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0844 vulnerable 2026-06-08 04:54:03.421193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0842 vulnerable 2026-06-08 04:52:04.823359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0841 vulnerable 2026-06-08 04:52:04.819224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0839 vulnerable 2026-06-08 04:52:04.740197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0838 vulnerable 2026-06-08 04:52:04.706700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0837 vulnerable 2026-06-08 04:52:04.693317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0095 vulnerable 2026-06-08 04:51:52.627706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0094 vulnerable 2026-06-08 04:51:52.622905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0093 vulnerable 2026-06-08 04:51:52.618856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0092 vulnerable 2026-06-08 04:51:52.614757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0091 vulnerable 2026-06-08 04:51:52.608534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0089 vulnerable 2026-06-08 04:51:52.602516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0088 vulnerable 2026-06-08 04:51:52.596477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0087 vulnerable 2026-06-08 04:51:52.589287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0085 vulnerable 2026-06-08 04:51:52.581056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0084 vulnerable 2026-06-08 04:51:52.575688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0082 vulnerable 2026-06-08 04:51:52.531019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.