Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jdk:1.3.1_12:*:*:*:*:*:*:*

part: a version: 1.3.1_12 update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJdk (86ca1592-c9ed-54c6-9315-e1ffda84ce5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3574 vulnerable 2026-06-08 04:55:15.224429 Details available
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3572 vulnerable 2026-06-08 04:55:15.212787 Details available
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3571 vulnerable 2026-06-08 04:55:15.204903 Details available
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the color profile parser that allows remote attackers to execute arbitrary code via a crafted Tag structure in a color profile.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3562 vulnerable 2026-06-08 04:55:15.167055 Details available
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3559 vulnerable 2026-06-08 04:55:15.155552 Details available
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this involves an incorrect sign extension in the HeadspaceSoundbank.nGetName function, which allows attackers to execute arbitrary code via a crafted BANK record that leads to a buffer overflow.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3557 vulnerable 2026-06-08 04:55:15.148200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3556 vulnerable 2026-06-08 04:55:15.141774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3554 vulnerable 2026-06-08 04:55:15.132483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3553 vulnerable 2026-06-08 04:55:15.126083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3549 vulnerable 2026-06-08 04:55:15.111068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3541 vulnerable 2026-06-08 04:55:15.037086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0850 vulnerable 2026-06-08 04:54:03.720971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0849 vulnerable 2026-06-08 04:54:03.713038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0848 vulnerable 2026-06-08 04:54:03.706596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0847 vulnerable 2026-06-08 04:54:03.699307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0846 vulnerable 2026-06-08 04:54:03.451706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0844 vulnerable 2026-06-08 04:54:03.431242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0842 vulnerable 2026-06-08 04:52:04.824497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0839 vulnerable 2026-06-08 04:52:04.770841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0088 vulnerable 2026-06-08 04:51:52.597900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0087 vulnerable 2026-06-08 04:51:52.590550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0085 vulnerable 2026-06-08 04:51:52.582236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0082 vulnerable 2026-06-08 04:51:52.548073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1190 vulnerable 2026-06-08 04:51:13.631959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.