Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*

part: a version: 1.3.1_25 update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3574 vulnerable 2026-06-08 04:55:15.225304 Details available
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3572 vulnerable 2026-06-08 04:55:15.213698 Details available
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3571 vulnerable 2026-06-08 04:55:15.206035 Details available
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the color profile parser that allows remote attackers to execute arbitrary code via a crafted Tag structure in a color profile.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3562 vulnerable 2026-06-08 04:55:15.167861 Details available
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3559 vulnerable 2026-06-08 04:55:15.156358 Details available
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this involves an incorrect sign extension in the HeadspaceSoundbank.nGetName function, which allows attackers to execute arbitrary code via a crafted BANK record that leads to a buffer overflow.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3557 vulnerable 2026-06-08 04:55:15.148994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3556 vulnerable 2026-06-08 04:55:15.142668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3554 vulnerable 2026-06-08 04:55:15.133258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3553 vulnerable 2026-06-08 04:55:15.126872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3549 vulnerable 2026-06-08 04:55:15.111872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3541 vulnerable 2026-06-08 04:55:15.071445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0850 vulnerable 2026-06-08 04:54:03.721797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0849 vulnerable 2026-06-08 04:54:03.713836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0848 vulnerable 2026-06-08 04:54:03.707396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0847 vulnerable 2026-06-08 04:54:03.700150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0846 vulnerable 2026-06-08 04:54:03.452527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0844 vulnerable 2026-06-08 04:54:03.435480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0842 vulnerable 2026-06-08 04:52:04.825266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0839 vulnerable 2026-06-08 04:52:04.794270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0088 vulnerable 2026-06-08 04:51:52.598881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0087 vulnerable 2026-06-08 04:51:52.591398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0085 vulnerable 2026-06-08 04:51:52.583120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0082 vulnerable 2026-06-08 04:51:52.559896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3877 vulnerable 2026-06-08 04:51:44.841632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3876 vulnerable 2026-06-08 04:51:44.836621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3875 vulnerable 2026-06-08 04:51:44.831545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3874 vulnerable 2026-06-08 04:51:44.698441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3873 vulnerable 2026-06-08 04:51:44.692720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3872 vulnerable 2026-06-08 04:51:44.687037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3871 vulnerable 2026-06-08 04:51:44.681428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3869 vulnerable 2026-06-08 04:51:44.675216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3868 vulnerable 2026-06-08 04:51:44.669439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3867 vulnerable 2026-06-08 04:51:44.643810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.