CVE-2010-0849

높음 7.5CVE-2010-0849 · Published 01/04/2010 · updated 16/06/2026

요약

CVE-2010-0849은(는) jdk (sun), jre (sun), sdk (sun)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 6.8%, 전체 취약점의 94.0%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
jdk sun	`= 1.3.0= 1.3.0_01= 1.3.0_02= 1.3.0_03= 1.3.0_04= 1.3.0_05= 1.3.1= 1.3.1_01= 1.3.1_01a= 1.3.1_02= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.3.1_24= 1.3.1_25= 1.3.1_26= 1.5.0= 1.6.0≤ 1.3.1_27≤ 1.5.0≤ 1.6.0`	No fix yet
jre sun	`= 1.3.0= 1.3.1= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_2= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.3.1_24= 1.3.1_25= 1.3.1_26= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_19= 1.4.2_2= 1.4.2_20= 1.4.2_21= 1.4.2_22= 1.4.2_23= 1.4.2_24= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0= 1.6.0≤ 1.3.1_27≤ 1.4.2_25≤ 1.5.0≤ 1.6.0`	No fix yet
sdk sun	`= 1.3.0= 1.3.0_01= 1.3.0_02= 1.3.0_03= 1.3.0_04= 1.3.0_05= 1.3.1= 1.3.1_01= 1.3.1_01a= 1.3.1_02= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.3.1_24= 1.3.1_25= 1.3.1_26= 1.4.2= 1.4.2_02= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_19= 1.4.2_20= 1.4.2_21= 1.4.2_22= 1.4.2_23= 1.4.2_24= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9≤ 1.3.1_27≤ 1.4.2_25`	No fix yet

Description

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.

References

jdk의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free